VULNERABILITY INTELLIGENCE

CVE-2024-29368

CVSS score6.5 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2024-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Description

An arbitrary file upload vulnerability in the file handling module of moziloCMS v2.0 allows attackers to bypass extension restrictions via file renaming, potentially leading to unauthorized file execution or storage of malicious content.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references