CVE-2024-39715
A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitrary files to the VSPC server using REST API, leading to re…
Published: 2024-09-07 · CVSS: 8.5 · CVSS 3.0
A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitrary files to the VSPC server using REST API, leading to remote code execution on VSPC server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7