CVE-2024-12994

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical. Affected by this issue is the function extractModel of the file /import of the component File Upload. The manipulation of the argument file leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-20 CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Dec 28, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-129953.5A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/05 CVE-2024-129986.1A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part CVE-2024-129999.8A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /CVE-2024-13005.4A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an un CVE-2024-130009.8A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /ad CVE-2024-130019.8A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admi CVE-2024-130029.8A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability CVE-2024-130039.8A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is som CVE-2024-130049.8A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the fil CVE-2024-130059.8A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unkn CVE-2024-130069.8A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects CVE-2024-130079.8A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the