VULNERABILITY INTELLIGENCE

CVE-2024-13134

CVSS score6.3 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-01-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability, which was classified as critical, was found in ZeroWdd studentmanager 1.0. Affected is the function addTeacher/editTeacher of the file src/main/Java/com/wdd/studentmanager/controller/TeacherController. java. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Weakness classification

  • cna@vuldb.com: CWE-284

Primary references