CVE-2024-13049

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 30, 2024

Updated: Jan 3, 2025

CWE ID 843

Summary

CVE-2024-13049 is a remote code execution vulnerability affecting Ashlar-Vellum Cobalt XE. This issue arises from insufficient validation of user-supplied data during XE file parsing, leading to a type confusion condition. An attacker can exploit this vulnerability by crafting a malicious page or file, requiring user interaction for successful exploitation. Once exploited, the attacker gains the ability to execute arbitrary code in the context of the affected installation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

C O B A L T

Affected Vendors

Ashlar

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/2Cp_gB
https://www.cve.org/CVERecord?id=CVE-2024-13049
https://nvd.nist.gov/vuln/detail/CVE-2024-13049

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners