CVE-2024-11404

Summary

CVE-2024-11404 is a vulnerability affecting the django Filer component of django CMS. The issue involves an Unrestricted File Upload with Dangerous Type, leading to Improper Input Validation and Basic XSS (Cross-Site Scripting). This flaw enables an attacker to manipulate input data and store malicious scripts within the system, posing a significant security risk. The affected version range is from django Filer 3.0 to 3.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.