CVE-2024-6937

Summary

CVE-2024-6937 is a vulnerability found in formtools.org Form Tools 3.1.1. The vulnerability affects the function curl_exec of the file /admin/forms/option_lists/edit.php of the component Import Option List. It allows for remote file inclusion, enabling attackers to manipulate the URL argument and launch attacks remotely. The exploit has been made public and poses a potential danger to organizations using this software. The vendor has been notified but has not responded. Remediation measures should be taken immediately to address this vulnerability and protect against potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.