CVE-2024-6469

Summary

CVE-2024-6469 is a newly disclosed vulnerability affecting playSMS version 1.4.3. This issue lies within the /index.php?app=main&inc=feature_firewall&op=firewall_list component's Template Handler, specifically an unknown functionality. An attacker can exploit this flaw by manipulating the IP address argument with the input "{{`id`}}", leading to injection. The vulnerability can be exploited remotely, and the exploit has been made public. Vendors were notified of the disclosure but failed to provide a response.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.