CVSS 3.1 Score 9.9 of 10 (high)


Published Apr 29, 2024
CWE ID 434


CVE-2024-4306 is a critical unrestricted file upload vulnerability in HubBank version 1.0.2. This vulnerability allows a registered user to upload malicious PHP files through upload document fields, leading to webshell execution. The base severity of this vulnerability is rated as critical with a base score of 9.9. It has a low exploitability score of 3.1 and requires low privileges and no user interaction. The attack vector is through the network, with high impact on integrity and confidentiality. The vulnerability poses a significant danger to organizations using HubBank as it can potentially allow attackers to execute arbitrary code on the system and gain unauthorized access to sensitive data. It is recommended that affected organizations update their HubBank software to the latest version to remediate this vulnerability and mitigate the associated risks.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-4306 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options