~ / search / GHSA-3636-hx62-pv26

GHSA-3636-hx62-pv26

Zenario allows authenticated admin users to upload PDF files containing malicious code

Source: GitHub Advisory Database (reviewed) Low CVE-2024-45960

Packages

EcosystemPackageAffectedFixed in
Packagist tribalsystems/zenario <= 9.7.61188 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting (XSS) attack.

References

External links from the advisory. They lead to third-party sites.