https://pwn.watch/i/versa-director-cve-2024-39717 The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface. The “Change Favicon” (Favorite Icon) enables the upload of a .png file, which can be exploited to upload a malicious file with a .png extension disguised as an image. Added to the CISA KEV catalog on 2024-08-23. en Fri, 23 Aug 2024 00:00:00 GMT https://pwn.watch/i/versa-director-cve-2024-39717 https://pwn.watch/i/versa-director-cve-2024-39717#2024-08-23-8d7e13ff Fri, 23 Aug 2024 00:00:00 GMT medium <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/versa-director-cve-2024-39717 https://pwn.watch/i/versa-director-cve-2024-39717#2024-08-22-8c01743a Thu, 22 Aug 2024 00:00:00 GMT medium <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-39717">Source</a></p>