CVE-2024-22938

Summary

CVE-2024-22938 is an Insecure Permissions vulnerability affecting BossCMS version 1.3.0. An attacker who has local access can exploit this flaw in the init function of admin.class.php to execute arbitrary code and escalate privileges. This vulnerability poses a significant threat as it can enable an attacker to gain unauthorized administrative control over the affected system. System administrators are strongly advised to apply the necessary patches or updates to mitigate this risk. Failure to do so may result in serious security consequences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.