← Database

CVE-2024-40125

CRITICAL CVSS: 9.8 Published: 2024-09-19 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint.

Affected Platforms

Closed-Loop Cless Server

Weakness Type

CWE-434, CWE-434

References