CVE-2024-49649

Summary

CVE-2024-49649 is a newly identified vulnerability affecting Abdul Hakeem Build App Online. This issue stems from an improper control of filename for include/require statements in PHP code. attackers can exploit this PHP Remote File Inclusion (RFI) vulnerability to include local files, potentially gaining unauthorized access to sensitive data or executing malicious code. The vulnerability is present in all versions of Build App Online from n/a through 1.0.23. It is crucial that users update their applications to the latest, secure version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.