CVE-2024-35591

May 24, 2024, 6:09 p.m.

Product(s) Impacted

O2OA

  • 8.3.8

Description

An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.

Weaknesses

Date

Published: May 24, 2024, 2:15 p.m.

Last Modified: May 24, 2024, 6:09 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References