CVE-2024-9923
Medium
Description
The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them.
SeverityMedium
CVSS4.9
Exploit probability—
ProductTeamplus Team\+ Pro
PublishedOct 14, 2024
First seenOct 14, 2024
Weakness typeCWE-23CWE-23
How to fix
Update
- teamplus team\+_pro14.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teamplus team\+_pro | 13.5.0 ≤ v < 14.0.0 | 14.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.