CVE-2024-45894

Summary

CVE-2024-45894 is a newly disclosed vulnerability affecting BlueCMS version 1.6. An attacker can exploit this Arbitrary File Deletion flaw, found in the /admin/database.php?act=del request, by manipulating the file_name parameter. This vulnerability allows unauthorized deletion of files, potentially exposing sensitive data or disrupting system operations. Successful exploitation of this vulnerability can lead to significant security risks, including data loss or privilege escalation. It is recommended that users of BlueCMS 1.6 upgrade to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.