CVE-2024-47655 — Unrestricted File Upload Vulnerability

CVE-2024-47655

Unrestricted File Upload Vulnerability PUBLISHED

Description (CNA)

This vulnerability exists in the Shilpi Client Dashboard due to improper validation of files being uploaded other than the specified extension. An authenticated remote attacker could exploit this vulnerability by uploading malicious file, which could lead to remote code execution on targeted application.

Affected (CNA)

Vendor / product	Versions
Shilpi Computers / Client Dashboard	affected <9.7.0

CWE

CWE-434

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0313

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.