CVE-2024-25414

Summary

CVE-2024-25414 is a newly discovered vulnerability affecting the CSZ CMS version 1.3.0. This issue permits attackers to upload maliciously crafted Zip files to the /admin/upgrade path, resulting in arbitrary code execution. By exploiting this vulnerability, cybercriminals can bypass security measures and gain unauthorized access to the system, potentially leading to data theft or website defacement. This vulnerability poses a significant risk to organizations using the affected CSZ CMS and highlights the importance of keeping software up-to-date and implementing proper file upload security controls.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.