CVE-2024-52498

Summary

CVE-2024-52498 is a newly disclosed vulnerability affecting Softpulse Infotech's SP Blog Designer. The issue involves a path traversal weakness that permits an attacker to conduct PHP Local File Inclusion attacks. By exploiting this vulnerability, an adversary can potentially gain unauthorized access to sensitive files on the targeted system. The affected version range of SP Blog Designer is from n/a to 1.0.0. System administrators are urged to update their installations as soon as a patch is released to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.