HIGH🇵🇱 Wersja polska

CVE-2024-28425

CVSS 7.5v3.1pub. 2024-03-14upd. 2025-09-18

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Linkedin Greykite

    APP
    Linkedin
    1.0.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2008-3435HIGH7.5ten sam vendor

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which al...

CVE-2025-56139MEDIUM5.3ten sam vendor

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title...

CVE-2021-4264MEDIUM6.3ten sam vendor

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue i...

CVE-2021-26722MEDIUM6.1ten sam vendor

LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found ...

CVE-2007-3955MEDIUM6.8ten sam vendor

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Tool...