← CVE Intelligence

CVE-2024-32880

pyLoad allows upload to arbitrary folder lead to RCE PUBLISHED

Description (CNA)

pyload is an open-source Download Manager written in pure Python. An authenticated user can change the download folder and upload a crafted template to the specified folder lead to remote code execution. There is no fix available at the time of publication.

Affected (CNA)

Vendor / productVersions
pyload / pyloadaffected <= 4.2.0

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.