CVE-2024-0465

Summary

CVE-2024-0465 is a newly disclosed vulnerability affecting the Employee Profile Management System 1.0 by code-projects. This issue lies within the file download.php and stems from a path traversal vulnerability. Manipulating the download_file argument allows an attacker to navigate through directories ('../filedir') and potentially access sensitive files. The exploit for this vulnerability has been made public, increasing the risk of exploitation. VDB-250570 is the assigned identifier for this security weakness.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.