4.10

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-08	CVE-2024-24202	Unrestricted Upload of File with Dangerous Type vulnerability in Easycorp Zentao, Zentao BIZ and Zentao MAX An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary code via uploading a crafted .txt file. network low complexity easycorp CWE-434 critical	9.8