CVE-2024-9985 — Ragic Enterprise Cloud Database - Arbitrary File Upload
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrar…
Published: 2024-10-15 · CVSS: 10.0 · CVSS 3.1
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7