CVE-2024-11211
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Nov 14, 2024
Updated: Nov 15, 2024
CWE ID 434
CWE ID 284
Summary
CVE-2024-11211 is a critical vulnerability affecting EyouCMS versions up to 1.6.7. This issue lies within an unidentified function of the Website Logo Handler component. The exploit enables unrestricted file uploads, making it possible for remote attackers to launch an assault. Sadly, the vulnerability has been made public, increasing the risk of active exploitation. Despite being informed about the disclosure, the vendor has yet to respond or issue a patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.