CVE-2024-0196 – Magic-Api code injection

https://notcve.org/view.php?id=CVE-2024-0196

02 Jan 2024 — A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. • https://github.com/laoquanshi/puppy/blob/main/Magic-Api%20Code%20Execution%20Vulnerability.md • CWE-94: Improper Control of Generation of Code ('Code Injection') •