CVE-2024-3775

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Apr 15, 2024
CWE ID 88

Summary

CVE-2024-3775 is a cyber vulnerability that affects the functionality of aEnrich Technology a+HRD's file downloading feature using youtube-dl.exe. This vulnerability allows attackers to exploit insufficient user input restrictions, enabling them to pass arbitrary arguments to youtube-dl.exe and download unauthorized files partially. The affected products include mlzC9l, rJe-yk, and mRt4es. The potential danger posed by this vulnerability to organizations is rated as medium severity, with a base score of 5.3. However, the confidentiality impact is low. To remediate this vulnerability, it is recommended to apply the necessary patches or updates provided by aEnrich Technology to ensure proper user input restrictions and prevent unauthorized file downloads.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-3775 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options