Threats tagged 'ghsa-qhv6-j2j7-vj9q'

A vulnerability in Rongzhitong Visual Integrated Command and Dispatch Platform up to version 20260617 allows remote attackers to perform unrestricted file uploads via manipulation of the File argument in the /dm/dispatch/userinfo/upload endpoint. The vulnerability has a CVSS 3.1 score of 7.3, indicating a medium severity. The vendor was contacted but did not respond, and no patch or remediation information is currently available. Exploit code is publicly available but no known exploitation in the wild has been reported.