Approved changes feed: RSS · Atom

cpe:2.3:a:angular-base64-upload-project:angular-base64-upload:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAngular Base64 Upload Project (b86e5640-b5d4-5bf4-b57b-5cb633dee1e4)
ProductAngular Base64 Upload (aa3bd06c-0bf8-50f2-babf-113814f09535)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42640 vulnerable 2026-06-08 06:45:46.844729 Details available
angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2024-10-11T00:00:00.000Z
Updated: 2024-10-15T16:15:15.198Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.