CVE-2024-8342

Summary

CVE-2024-8342 is a critical vulnerability found in SourceCodester Petshop Management System version 1.0, specifically affecting the file /controllers/add_client.php. This vulnerability allows for unrestricted file uploads through manipulation of the image_profile argument, which can be exploited remotely. Organizations using this system are at risk of unauthorized access and potential exploitation due to this weakness. To remediate the issue, it is recommended to implement proper validation and restrictions on uploaded files, as well as update to a patched version if available. The CVSS score for this vulnerability is 6.3, indicating a medium level of severity with low attack complexity and minimal required privileges for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.