← Database

CVE-2024-56973

CRITICAL CVSS: 9.8 Published: 2025-02-14 Modified: 2026-06-17

Description

Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2 allows a remote attacker to execute arbitrary code via the source and filename parameters to the ProcessUploadFromURL.jsp component.

Affected Platforms

Unknown

Weakness Type

CWE-281

References