Lucene search
HistoryJan 26, 2024 - 3:15 p.m.
CVE-2024-22550
arbitrary file upload
shopsite v14.0
code execution
svg file vulnerability
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
27.9%
An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.
Affected configurations
Node
shopsiteshopsiteMatch14.0
Related
cve
cve
CVE-2024-22550
2024-01-26 15:15:09
prion
prion
Privilege escalation
2024-01-26 15:15:00
vulnrichment
vulnrichment
CVE-2024-22550
2024-01-26 00:00:00
cvelist
cvelist
CVE-2024-22550
2024-01-26 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
27.9%
Related for NVD:CVE-2024-22550