CVE-2024-0505 MEDIUM

CVE-2024-0505: ZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted upload

Vendor Zhongfucheng3Y

Product Austin

Weakness CWE-434 · Unrestricted file upload

Published January 13, 2024

Last update June 3, 2025

View on NVD All CVEs

CVSS base score

5.5/10

Attack vector Adjacent

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

Description

A vulnerability was found in ZhongFuCheng3y Austin 1.0 and classified as critical. This issue affects the function getFile of the file com/java3y/austin/web/controller/MaterialController.java of the component Upload Material Menu. The manipulation leads to unrestricted upload. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250619.

Key dates

Disclosure timeline

January 13, 2024 CVE published

June 3, 2025 Record updated