Security Advisory
CVE-2024-24202
9.8
CRITICAL
Vulnerability Description
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file.
Published Date
February 8, 2024
Official Source
NIST NVD Advisory