CVE-2024-25228

2024-03-1402:15:50

[email protected]

web.nvd.nist.gov

cve-2024-25228

vinchin backup

authenticated rce

remote code execution

nvd

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.

References

blog.leakix.net/2024/01/vinchin-backup-rce-chain/

seclists.org/fulldisclosure/2024/Mar/15