CVE-2024-7741

Summary

CVE-2024-7741 is a critical vulnerability affecting the wanglongcn ltcms 1.0.20 component API Endpoint. The issue lies within the function "downloadFile" situated at "/api/file/downloadfile." An attacker can exploit this path traversal vulnerability by manipulating the "file" argument to navigate beyond intended directories. The exploit can be initiated remotely, and the vulnerability has been disclosed to the public, increasing the risk of exploitation. Notably, the vendor was contacted about this disclosure but failed to respond.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.