CVE-2024-7705

Summary

CVE-2024-7705 is a critical vulnerability affecting the Image Upload component of Fujian mwcms version 1.0.0. The function uploadeditor, located at /uploadeditor.html?action=uploadimage, is the point of vulnerability. An attacker can exploit this by manipulating the upfile argument, leading to an unrestricted upload. The attack can be launched remotely, and the exploit has been disclosed to the public. Despite early notification, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.