CVE-2024-2604

Summary

CVE-2024-2604 is a critical vulnerability affecting the SourceCodester File Manager App 1.0. This issue resides in the /endpoint/update-file.php code and enables unrestricted file uploads through the manipulation of an argument. An attacker can exploit this remotely, and the exploit for this vulnerability has been made public. Vulnerability database VDB assigns the identifier VDB-257182 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.