CVE-2024-13145

Summary

CVE-2024-13145 is a critical vulnerability affecting the zhenfeng13 My-Blog 1.0 software. The issue lies within the upload function located in the file src/main/java/com/site/blog/my/core/controller/admin/uploadController.java. Successful exploitation allows an attacker to perform unrestricted uploads, which can be executed remotely. The vulnerability has been publicly disclosed, increasing the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.