CVE-2024-9280
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Sep 27, 2024
Updated: Oct 4, 2024
CWE ID 434
Summary
CVE-2024-9280 is a newly disclosed critical vulnerability affecting the kalvinGit kvf-admin version up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff. This issue lies within the function fileUpload of the FileUploadKit.java, where a manipulated file argument results in an unrestricted upload. The vulnerability is remotely exploitable, and an exploit has been made public. The product employs continuous delivery with rolling releases, making it difficult to determine which versions are impacted or have been updated.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.