VULNERABILITY INTELLIGENCE

CVE-2024-11018

CVSS score9.8 CRITICAL
EPSS probability0.83%
CISA KEVNot currently listed
Published2024-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Webopac from Grand Vice info does not properly validate uploaded file types, allowing unauthenticated remote attackers to upload and execute webshells, which could lead to arbitrary code execution on the server.

Weakness classification

  • twcert@cert.org.tw: CWE-434

Primary references