CVE-2024-0713

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Jan 19, 2024
Updated: Mar 21, 2024
CWE ID 434

Summary

CVE-2024-0713 is a critical vulnerability found in Monitorr 1.7.6m, affecting its Services Configuration functionality. This vulnerability allows for unrestricted upload by manipulating the argument fileToUpload, which can be exploited remotely. The vendor has been notified but did not respond. The vulnerability has been disclosed publicly and poses a potential danger to organizations that use Monitorr 1.7.6m, as it can be exploited to upload malicious files. Remediation steps should include updating to a patched version or implementing other mitigations recommended by the vendor or security experts.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share