← Back to browse · API

CVE-2024-29276

Severity
CRITICAL
CVSS
9.8
EPSS
0.32791
Risk score
50.68
CISA KEV
No
PoC
No
Published
2024-04-02
Modified
2024-08-20
First seen
2026-08-07
Aliases
EUVD-2024-26288, GHSA-RJ56-C2JF-78QG
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-26288

Description

An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDesignerController.class component.

References