← CVE Intelligence

CVE-2023-24836

SUNNET CTMS - Path Traversal PUBLISHED

Description (CNA)

SUNNET CTMS has vulnerability of path traversal within its file uploading function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system operation or disrupt service.

Affected (CNA)

Vendor / productVersions
SUNNET / CTMSaffected 7.0 1227

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.