VulnerabilityDeferred

CVE-2024-29276

An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDesignerController.class component.

CRITICAL 9.8EPSS 32.8%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 32.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDesignerController.class component.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 32.79% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-94
Source: cve@mitre.org

References

https://www.cnblogs.com/Rainy-Day/p/18061399
https://www.cnblogs.com/Rainy-Day/p/18061399

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.