Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-8940

Unrestricted Upload of File with Dangerous Type vulnerability on Scriptcase

Description

Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/jquery_plugin/jQuery-File-Upload/server/php/ via a POST request. An attacker could upload malicious files to the server due to the application not properly verifying user input.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Scriptcase Scriptcase

Default version status: unaffected

  • 9.4.019affected

References