high8.8
CVE-2024-26504
An issue in Wifire Hotspot v.4.5.3 allows a local attacker to execute arbitrary code via a crafted payload to the dst parameter.
Impact
An issue in Wifire Hotspot v.4.5.3 allows a local attacker to execute arbitrary code via a crafted payload to the dst parameter.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://cwe.mitre.org/data/definitions/601.html
- https://portswigger.net/kb/issues/00500100_open-redirection-reflected
- https://tomiodarim.io/posts/cve-2024-26504/
- https://wifire.me/en/hotspot
- https://cwe.mitre.org/data/definitions/601.html
- https://portswigger.net/kb/issues/00500100_open-redirection-reflected
- https://tomiodarim.io/posts/cve-2024-26504/
- https://wifire.me/en/hotspot