CVE-2024-4825 Information
May 15, 2024
cve
Description
A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server compromising the entire infrastructure.