CVE-2024-8341

Summary

CVE-2024-8341 is a critical vulnerability identified in SourceCodester Petshop Management System version 1.0, specifically affecting the file located at /controllers/add_user.php. This flaw allows for unrestricted file uploads through manipulation of the avatar argument, enabling attackers to exploit this remotely without any required privileges or user interaction. The potential risks include high impacts on confidentiality, integrity, and availability of systems using this software, as the CVSS score is rated at 9.8. Organizations are advised to remediate this issue by applying patches or implementing security measures that restrict file uploads to safe types only. The vulnerability has been disclosed publicly, increasing the urgency for affected users to address it promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.