CVE-2024-8002
CVSS 2.0 Score 5 of 10 (medium)
Details
Published Jan 8, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-8002 is a newly identified vulnerability affecting the File Upload component in VIWIS LMS 9.11. This issue is classified as problematic and involves cross-site scripting (XSS). The vulnerability can be exploited remotely by manipulating the argument filename. Upgrading to version 9.12 is recommended to mitigate this risk, as it addresses the underlying issue. Organizations using the affected version of VIWIS LMS should prioritize upgrading as soon as possible to protect against potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.