CVE-2024-55078
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 3, 2025
CWE ID 434
Summary
CVE-2024-55078 is a newly disclosed vulnerability affecting WukongCRM-11.0-JAVA version 11.3.3. This issue involves an arbitrary file upload vulnerability in the /adminUser/updateImg component. By uploading a specially crafted file, attackers can execute arbitrary code on the affected system. This vulnerability poses a significant risk to organizations using WukongCRM and highlights the importance of keeping software up-to-date with the latest security patches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.