high8.8Public exploit code
CVE-2024-25832
F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by mani…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DataCube3 v1.0 - Unrestricted file upload 'RCE'2024-03-10 · webapps · php
Impact
F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F-Logic | Datacube3 | Version 1.0 |