CVE-2024-42640

Summary

CVE-2024-42640 is a remote code execution vulnerability affecting the angular-base64-upload library before version 0.1.21. The issue lies in the demo/server.php file, which is vulnerable to unauthenticated attacks. An attacker can exploit this flaw to upload arbitrary content, which can then be executed on the server through the demo/uploads interface. This leads to the execution of previously uploaded code, granting the attacker code execution rights on the server. Importantly, this vulnerability only impacts unsupported versions of the library.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.