Security Advisory

CVE-2024-55078

9.8
CRITICAL

Vulnerability Description

An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows attackers to execute arbitrary code via uploading a crafted file.
Published Date January 3, 2025
Official Source NIST NVD Advisory