1 results (0.001 seconds)
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1
CVE-2024-0196 – Magic-Api code injection
https://notcve.org/view.php?id=CVE-2024-0196
A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. • https://github.com/laoquanshi/puppy/blob/main/Magic-Api%20Code%20Execution%20Vulnerability.md https://vuldb.com/?ctiid.249511 https://vuldb.com/?id.249511 • CWE-94: Improper Control of Generation of Code ('Code Injection') •