CVE-2024-0505

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 13, 2024
Updated: May 17, 2024
CWE ID 434

Summary

CVE-2024-0505 is a critical vulnerability affecting the ZhongFuCheng3y Austin 1.0 software. The issue lies within the getFile function of the MaterialController.java component (com/java3y/austin/web/controller/MaterialController.java) and results in an unrestricted upload vulnerability. This flaw has been disclosed to the public and may be exploited by attackers. The associated vulnerability identifier is VDB-250619.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share