CVE-2024-1703
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Feb 21, 2024
Updated: Jan 3, 2025
CWE ID 22
CWE ID 36
Summary
CVE-2024-1703 is a newly disclosed vulnerability affecting ZhongBangKeJi CRMEB 5.2.2. The issue lies in the function "openfile" located in the "/adminapi/system/file/openfile" file. This vulnerability is classified as problematic due to absolute path traversal manipulation. The exploit has been made public, increasing the risk of potential attacks. The associated identifier for this vulnerability is VDB-254391. Unfortunately, the vendor was not responsive when notified about the disclosure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.