ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.
References
Link | Resource |
---|---|
https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html | Third Party Advisory |
https://www.twcert.org.tw/tw/cp-132-7998-d76dd-1.html | Third Party Advisory |
Configurations
History
06 Sep 2024, 17:24
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References | () https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html - Third Party Advisory | |
References | () https://www.twcert.org.tw/tw/cp-132-7998-d76dd-1.html - Third Party Advisory | |
First Time |
Teamt5
Teamt5 threatsonar Anti-ransomware |
|
CPE | cpe:2.3:a:teamt5:threatsonar_anti-ransomware:*:*:*:*:*:*:*:* |
12 Aug 2024, 13:41
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-12 13:38
Updated : 2024-09-06 17:24
NVD link : CVE-2024-7694
Mitre link : CVE-2024-7694
CVE.ORG link : CVE-2024-7694
JSON object : View
Products Affected
teamt5
- threatsonar_anti-ransomware
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type