CVE-2024-54453

Summary

CVE-2024-54453 is a newly disclosed vulnerability affecting Kurmi Provisioning Suite versions before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. This issue involves a path traversal vulnerability in the DocServlet servlet, enabling remote attackers to access and retrieve any file from the Kurmi web application installation directory. Potentially sensitive files, including obfuscated and compiled Kurmi source code, could be at risk. The exploitation of this vulnerability may lead to data exposure and unauthorized access to critical system information. Users are urged to update their Kurmi Provisioning Suite installation to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.