An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/33xxx/CVE-2024-33752.json",
"cna_assigner": "mitre"
}{
"cpe": [
"cpe:2.3:a:emlog:emlog:2.3.0:*:*:*:pro:*:*:*",
"cpe:2.3:a:emlog:emlog:2.3.2:*:*:*:pro:*:*:*"
],
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "2.3.0"
},
{
"last_affected": "2.3.0"
},
{
"introduced": "2.3.2"
},
{
"last_affected": "2.3.2"
}
]
}