CVE-2024-48694

Description

File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arbitrary code via the pw/savedraw component.

Reserved 2024-10-08 | Published 2024-11-19 | Updated 2024-11-21 | Assigner mitre

References

github.com/...iceWeb365-SaveDraw-任意文件上传漏洞.md

github.com/...ficeWeb365_SaveDraw任意文件上传漏洞.py

github.com/...eb365 SaveDraw 任意文件上传漏洞 (2).md

avd.aliyun.com/detail?id=AVD-2023-1678930

github.com/...5 SaveDraw 任意文件上传漏洞.md?plain=1

cve.org (CVE-2024-48694)

nvd.nist.gov (CVE-2024-48694)

Download JSON