CVE-2024-9985

Summary

CVE-2024-9985 is a vulnerability affecting the Enterprise Cloud Database from Ragic. The issue lies in the software's failure to adequately validate file types during uploads. Attackers with regular privileges can exploit this weakness to upload a webshell, thereby gaining the ability to execute arbitrary code on the targeted remote server. This poses a significant risk for unauthorized access, data theft, or system compromise. Organizations utilizing Ragic's Enterprise Cloud Database are advised to apply the available patch or update as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.