CVE-2025-24343

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Apr 30, 2025
Updated: May 2, 2025
CWE ID 23

Summary

CVE-2025-24343 is a vulnerability affecting the "Manages app data" functionality in the web application of ctrlX OS. This issue grants a remote, low-privileged attacker the ability to write arbitrary files in specified file system paths through a carefully crafted HTTP request. Successful exploitation could lead to data tampering, unauthorized access, or other security risks. It is essential that users apply the necessary patches or updates to mitigate this vulnerability promptly.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share