CVE-2024-44016
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 5, 2024
Updated: Oct 7, 2024
CWE ID 22
Summary
CVE-2024-44016 is a newly identified path traversal vulnerability affecting the Mark Steadman Podiant application. This issue enables an attacker to bypass security restrictions and include arbitrary PHP files through Local File Inclusion, potentially leading to serious code execution attacks. Affected versions of Podiant include those from the unknown version n/a up to and including 1.1. Users are advised to update to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.