CVE-2024-7905

Summary

CVE-2024-7905 is a newly disclosed critical vulnerability that impacts DedeBIZ 6.3.0. The AdminUpload function in admin/archives_do.php is the affected component. An attacker can exploit this vulnerability by manipulating the litpic argument, leading to unrestricted file upload. This attack can be initiated remotely, allowing attackers to gain unauthorized access to the system. Unfortunately, the vendor has not responded to disclosure of this vulnerability, leaving affected systems potentially exposed to exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.