CVE-2024-25228

2024-03-1400:00:00

mitre

www.cve.org

vinchin backup

recovery

authenticated

remote code execution

vulnerability

manoeuvrehandler.class.php

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.

References

blog.leakix.net/2024/01/vinchin-backup-rce-chain/

seclists.org/fulldisclosure/2024/Mar/15