CVE-2024-9917

Summary

CVE-2024-9917 is a critical vulnerability affecting HuangDou UTCMS V9. The issue lies within the file app/modules/ut-template/admin/template_creat.php, and involves deserialization after the manipulation of argument content. This vulnerability can be exploited remotely, making it a significant threat. The exploit for this vulnerability has been made public, increasing the risk of attacks. Efforts to contact the vendor about this disclosure have been unsuccessful.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.