Abdelrahman Mohamed

**Name of the Vulnerable Software and Affected Versions** Teller Web App version 4.4.0 **Description** An arbitrary file upload vulnerability allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file. **Recommendations** For Teller Web App version 4.4.0, consider disabling the file upload feature until a patch is available to prevent exploitation. Restrict access to sensitive information and monitor for any suspicious activity. At the moment, there is no information about a newer version that contains a fix for this vulnerability.