CVE-2024-7740

Summary

CVE-2024-7740 is a newly discovered critical vulnerability affecting the wanglongcn ltcms 1.0.20 component API Endpoint. The issue lies in the function download of the /api/test/download path, which can be exploited through server-side request forgery. This vulnerability allows attackers to manipulate arguments in URLs, initiating remote attacks. Though the vendor was notified, they have yet to respond or provide a patch. The exploit for this vulnerability has been made public, increasing the risk for potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.