Overview
- Description
- An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a crafted file.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Social media
- Hype score
- Not currently trending
CVE-2024-37847 An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a crafted file. https://t.co/lkTtBJpGp4
@VulmonFeeds
25 Oct 2024
33 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
CVE-2024-37847 An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a crafted file. https://t.co/j5uOdKmUlA
@CVEnew
25 Oct 2024
366 Impressions
0 Retweets
0 Likes
1 Bookmark
0 Replies
0 Quotes
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:radixiot:mango:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A8E1DDF-63E8-4C11-AA25-F11CE3976FA7",
"versionEndExcluding": "5.1.4"
},
{
"criteria": "cpe:2.3:a:radixiot:mangoapi:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "997E9719-EA5D-41DC-ACF7-8016356B03D5",
"versionEndExcluding": "4.5.5"
}
],
"operator": "OR"
}
]
}
]