cbcvebase.

Closed-Loop Cless Server vulnerabilities

1 known vulnerability affecting closed-loop/cless_server.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2024-40125P2CRITICALCVSS 9.8v4.5.22024-09-19
CVE-2024-40125 [CRITICAL] CWE-434 CVE-2024-40125: An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint.
nvd
Closed-Loop Cless Server vulnerabilities | cvebase