CVE-2024-0916

published 2024-04-25

CVE-2024-0916: Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3.

Priority P2 67 critical 10 CVSS 3.1

AV N AC L PR N UI N S C C H I H A H

Unauthenticated file upload allows remote code execution.
This issue affects UvDesk Community: from 1.0.0 through 1.1.3.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
webkul_software	uvdesk_community	1.0.0 – 1.1.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-434