| Summary | Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files. NOTE: this is disputed by the vendor because file upload is allowed for authorized users. |
|---|---|
| Publication Date | Oct. 31, 2024, 6:15 a.m. |
| Registration Date | Oct. 31, 2024, noon |
| Last Update | Nov. 5, 2024, 4:35 a.m. |