high7.2
CVE-2024-3123
CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly.
Impact
CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly. Remote attackers with administrator privilege can exploit this vulnerability to upload and run malicious file to execute system commands.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.