Security Advisory
CVE-2024-25274
9.8
CRITICAL
Vulnerability Description
An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file.
Published Date
February 20, 2024
Official Source
NIST NVD Advisory