CVE-2024-9816

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Oct 10, 2024
Updated: Oct 15, 2024
CWE ID 434

Summary

CVE-2024-9816 is a critical vulnerability affecting Codezips Tourist Management System version 1.0, specifically within the file /admin/change-image.php, which allows for unrestricted file uploads via manipulation of the packageimage argument. This vulnerability can be exploited remotely and may result in unauthorized access or malicious file uploads, posing a potential risk to the integrity and confidentiality of the system. The vulnerability has been publicly disclosed, increasing its exposure to potential attackers. To remediate this issue, organizations are advised to restrict file upload functionalities and implement proper validation checks for uploaded files. The CVSS base score for this vulnerability is 4.7, indicating a medium severity level with high privileges required for exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share