CVE-2024-11984

Summary

CVE-2024-11984 is a vulnerability affecting the Corporate Training Management System version before 10.13. This issue allows authenticated attackers to bypass file upload restrictions in the epaper draft function. By uploading a specially crafted ZIP file, they can execute arbitrary system commands with SYSTEM privilege, posing a significant security risk. This vulnerability can be exploited remotely, enabling attackers to gain unrestricted access and potentially take control of the system. Organizations using the Corporate Training Management System are advised to update to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.