Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-9985

Ragic Enterprise Cloud Database - Arbitrary File Upload

Description

Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ragic Enterprise Cloud Database

Default version status: unaffected

  • 0 to < 2024/08/08 09:45:25affected

References