Unauthenticated Path Traversal Vulnerability Allows Arbitrary File Execution

CVE-2024-11311

Summary

The DVC product from TRCore is affected by a Path Traversal vulnerability that enables unauthenticated remote attackers to exploit the application by uploading arbitrary files to any directory. This exploitation occurs due to the lack of restrictions on the types of files that can be uploaded. Consequently, this could result in the execution of malicious code, such as webshells, thus compromising the security and integrity of the system.

References