CVE-2024-52302

🗓️ 14 Nov 2024 15:26:49Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 162 Views🌐 WEB

Spring Boot application with critical file upload vulnerability

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-52302	14 Nov 202415:28	–	circl
CNNVD	Java-springboot-codebase 代码问题漏洞	14 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-52302 common-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)	14 Nov 202415:26	–	cvelist
GithubExploit	Exploit for CVE-2024-52302	14 Nov 202416:04	–	githubexploit
Exploit DB	Spring Boot common-user-management 0.1 - Remote Code Execution (RCE)	15 Apr 202500:00	–	exploitdb
EUVD	EUVD-2024-45839	3 Oct 202520:07	–	euvd
NVD	CVE-2024-52302	14 Nov 202416:15	–	nvd
Packet Storm	📄 Spring Boot common-user-management 0.1 Shell Upload	15 Apr 202500:00	–	packetstorm
Positive Technologies	PT-2024-35165 · Unknown · Common-User-Management	14 Nov 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-52302	23 May 202510:36	–	redhatcve

Vulners

Node

osamataher java-springboot-codebaseRange<204402bb8b68030c14911379ddc82cfff00b8538

[
  {
    "vendor": "OsamaTaher",
    "product": "Java-springboot-codebase",
    "versions": [
      {
        "version": "< 204402bb8b68030c14911379ddc82cfff00b8538",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/OsamaTaher/Java-springboot-codebase/security/advisories/GHSA-rhcq-44g3-5xcx
github	www.github.com/OsamaTaher/Java-springboot-codebase/commit/204402bb8b68030c14911379ddc82cfff00b8538

Parameter	Position	Path	Description	CWE
file	request body	/api/v1/customer/profile-picture	Unrestricted file upload vulnerability in profile-picture endpoint enabling uploading arbitrary files	CWE-434

17 Jun 2026 08:06Current

7.3High risk

Vulners AI Score7.3

CVSS 48.7

EPSS0.03222

SSVC

CWE-434