CVE-2024-10224

Summary

CVE-2024-10224 is a newly discovered vulnerability affecting Qualys' Modules::ScanDeps library. Unsanitized input could be exploited by a local attacker before version 1.36, potentially allowing them to execute arbitrary shell commands. This could be accomplished through the open() function by using a "pesky pipe," such as "commands|," or by passing arbitrary strings to eval(). This vulnerability poses a significant security risk and requires immediate attention from users to update their libraries to the latest version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.