Vulnerability CVE-2024-37273


Published: 2024-06-04

Description:
An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

 References:
https://github.com/HackAllSec/CVEs/tree/main/Jan%20Arbitrary%20File%20Upload%20vulnerability

Copyright 2026, cxsecurity.com

 

Back to Top