CVE-2024-13138

Summary

CVE-2024-13138 is a critical vulnerability affecting the "upload" function in the wangl1989 mysiteforme 1.0 software. The issue lies in the LocalUploadServiceImpl class located in the src/main/java/com/mysiteform/admin/service/ipl directory. An attacker can exploit this vulnerability by manipulating the argument "test," leading to unrestricted file uploads. The exploit can be initiated remotely, and the vulnerability has been disclosed to the public, increasing the risk of widespread attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.