← CVE Intelligence

CVE-2024-4461

Unquoted path or search item vulnerability in SugarSync PUBLISHED

Description (CNA)

Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.

Affected (CNA)

Vendor / productVersions
SugarSync / SugarSyncaffected 0 before 4.1.3

CWE

CWE-428

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.