CVE-2024-55372 Information
Apr 17, 2025
cve
Description
Wallos <=2.38.2 has a file upload vulnerability in the restore database function which allows unauthenticated users to restore database by uploading a ZIP file. The contents of the ZIP file are extracted on the server. This functionality enables an unauthenticated attacker to upload malicious files to the server. Once a web shell is installed the attacker gains the ability to execute arbitrary commands.