CVE-2024-57685

Summary

CVE-2024-57685 is a newly disclosed vulnerability affecting SparkShop versions 1.1.7 and older. This issue grants remote attackers the ability to execute arbitrary code by exploiting a vulnerability in the application's handling of Phar files. By crafting a malicious Phar file, an attacker can potentially gain unauthorized access to the system and execute malicious code, resulting in potential data loss or unauthorized system modifications. Users are strongly advised to update their SparkShop installations to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.