VULNERABILITY INTELLIGENCE

CVE-2024-11017

CVSS score8.8 HIGH
EPSS probability0.77%
CISA KEVNot currently listed
Published2024-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Webopac from Grand Vice info does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells, which could lead to arbitrary code execution on the server.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references