CVE-2024-13144

Summary

CVE-2024-13144 is a newly disclosed critical vulnerability affecting the zhenfeng13 My-Blog 1.0 software. The issue lies within the uploadFileByEditomd function of BlogController.java, specifically the manipulation of the editormd-image-file argument. This vulnerability allows for unrestricted file uploads, making it a significant security risk. An attacker can exploit this remotely, exposing systems to potential data breaches and further exploitation. Public disclosure of the exploit increases the likelihood of active attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.