CVE-2024-9855

Summary

CVE-2024-9855 is a critical vulnerability that affects the file upload function of 07FLYCMS, 07FLY-CMS, and 07FlyCRM 1.3.8. The manipulation of the file argument can lead to unrestricted upload, allowing remote attacks. This vulnerability has been disclosed to the public and may be actively exploited. The affected product, also known as Module Plug-In Handler, was not reachable for notification prior to CVE assignment due to an unresponsive vendor email address.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.