CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-57408: An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via...
Description
An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file.
Classification
CVE ID: CVE-2024-57408
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 18.34% (scored less or equal to compared to others)
EPSS Date: 2025-03-11 (when was this score calculated)
References
https://github.com/cool-team-official/cool-admin-javahttps://github.com/kaoniniang2/exploit/blob/main/Cool-admin-File%20upload%20vulnerability.md
https://gist.github.com/kaoniniang2/2cfc83a612ba929279ed5fb8b91b45ba