Arbitrary file upload in Tibbo Aggregate Network Manager
CVE-2024-12700
There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.
Vulnerability class: Unrestricted File Upload
EPSS: 0.006 (44.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Tibbo Aggregate Network Manager — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-12700?
- CVE-2024-12700 is a high-severity vulnerability in Tibbo Aggregate Network Manager, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 8.8/10. Published 2024-12-19.
- How severe is CVE-2024-12700?
- High severity. CVSS v3 base score is 8.8 out of 10.