CVE-2024-9257

Summary

CVE-2024-9257 is a file deletion vulnerability affecting Logsign Unified SecOps Platform. This issue allows remote attackers, after authentication, to delete arbitrary files within sensitive directories by exploiting a flaw in the delete_gsuite_key_file endpoint. The vulnerability stems from insufficient input validation, enabling an attacker to manipulate the filename used in file operations. Critical system files are potential targets for deletion. (ZDI-CAN-25265)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.