VULNERABILITY INTELLIGENCE

CVE-2024-12700

CVSS score8.8 HIGH

EPSS probability0.57%

CISA KEVNot currently listed

Published2024-12-19

Last modified2026-06-17

Description

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.