TI-2024-26881 CVE-2024-40125 · GHSA-gmcc-j293-2h95An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop…Priority HIGH 82An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00883 · Published 2024-09-19 · No fix listed CWE-434