CVE-2024-52450

Summary

CVE-2024-52450 is a filename manipulation vulnerability affecting the nBlocks PHP application. The issue stems from an improper handling of include/require statements in the software. An attacker could exploit this vulnerability to perform Local File Inclusion attacks, potentially gaining unauthorized access to sensitive data or executing arbitrary code. The affected versions of nBlocks include those from the unspecified n/a through 1.0.2. It is recommended that users of these versions upgrade to a secure and patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.