critical9.8
CVE-2024-44373
A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06_06 allows an unauthenticated attacker to create a webshell and remote code execution v…
Impact
A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06_06 allows an unauthenticated attacker to create a webshell and remote code execution via the path, content parameter to /includes/save_file.php.
Affected products
| Product | Affected versions |
|---|---|
| AllSky V2023.05.01 | through 2024.12.06_06 |
Versions were read from the advisory text. No structured product data has been published for this record yet.