← Database

CVE-2024-44373

CRITICAL CVSS: 9.8 Published: 2025-08-19 Modified: 2026-06-17

Description

A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06_06 allows an unauthenticated attacker to create a webshell and remote code execution via the path, content parameter to /includes/save_file.php.

Affected Platforms

Unknown

Weakness Type

CWE-22

References