CVE-2024-34913

https://notcve.org/view.php?id=CVE-2024-34913

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file. Una vulnerabilidad de carga de archivos arbitraria en r-pan-scaffolding v5.0 y versiones anteriores permite a los atacantes ejecutar código arbitrario cargando un archivo PDF manipulado. • https://github.com/Joying-C/Cross-site-scripting-vulnerability/tree/main/r-pan-scaffolding_Cross_site%20_scripting%20_vulnerability • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-434: Unrestricted Upload of File with Dangerous Type •