CVE-2024-49048

Summary

CVE-2024-49048 is a newly disclosed vulnerability affecting TorchGeo, a geospatial data processing software. This issue permits an attacker to execute arbitrary code remotely, granting unauthorized access and potential data theft. The vulnerability exists in the TorchGeo Server component, which processes geospatial data requests. Successful exploitation occurs when the software fails to properly validate user-supplied input, allowing an attacker to inject and execute malicious code. Organizations using TorchGeo are urged to apply patches promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.