CVE-2024-52449

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 20, 2024
Updated: Nov 21, 2024
CWE ID 22

Summary

CVE-2024-52449 is a newly disclosed Path Traversal vulnerability that poses a risk to Navneil Naicer Bootscraper. This issue permits attackers to bypass security restrictions and include PHP files located in restricted directories through Local File Inclusion (LFI). The vulnerability affects Bootscraper versions from n/a through 2.1.0. A successful exploit could lead to unauthorized access, disclosure, or modification of sensitive data, and potential system compromise. Users are advised to update their Bootscraper installations to a patched version as soon as possible to protect against this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share