CVE-2024-11484

Summary

CVE-2024-11484 is a critical vulnerability identified in the Code4Berry Decoration Management System 1.0. Affected is an unidentified feature of the file /decoration/admin/update_image.php within the User Image Handler component. The vulnerability allows for improper access controls when manipulating the argument productimage1. This issue can be exploited remotely, making it a significant security risk. The public disclosure of the exploit increases the threat level, but the vendor has yet to respond to reports of the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.