Lucene search

K
nvd[email protected]NVD:CVE-2024-24550
HistoryJun 24, 2024 - 7:15 a.m.

CVE-2024-24550

2024-06-2407:15:13
CWE-77
CWE-434
CWE-502
web.nvd.nist.gov
5
bludit
security vulnerability
file uploads
code execution
api token
improper handling
malicious actors
php files

0.0004 Low

EPSS

Percentile

9.1%

A security vulnerability has been identified in Bludit, allowing attackers with knowledge of the API token to upload arbitrary files through the File API which leads to arbitrary code execution on the server. This vulnerability arises from improper handling of file uploads, enabling malicious actors to upload and execute PHP files.

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-24550