CVE-2024-33752 - An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code

Back Back to CVE browser

MEDIUM

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code

Published May 6, 2024

6.3

MEDIUM

CVSS 3.1

EPSS 4.65%

Description

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code.

Affected products

Vendor Emlog Product Emlog Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Emlog

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (1)

https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md
ExploitThird Party Advisory

Link	Providers	Tags
https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 6, 2024

Updated Aug 2, 2024

Reserved Apr 26, 2024

Link CVE-2024-33752

CISA Vulnrichment

Updated May 7, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-33752

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-33752