CVE-2024-7904

Summary

CVE-2024-7904 is a critical vulnerability affecting DedeBIZ 6.3.0. The issue lies within the file admin/file_manage_control.php, specifically in the File Extension Handler component. An attacker can exploit the vulnerability by manipulating the argument upfile1, resulting in unrestricted upload. This attack can be launched remotely, and the exploit has already been disclosed to the public. Despite being notified early, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.