CVE-2024-49324

Published at:
2024-10-20T09:15:03.227

Global infos:

Unrestricted Upload of File with Dangerous Type vulnerability in Sovratec Sovratec Case Management allows Upload a Web Shell to a Web Server.This issue affects Sovratec Case Management: from n/a through 1.0.0.

CVE Status: Analyzed

References:

  • [email protected]
  • Metrics:

    AttributeValue
    Attack ComplexityLOW
    Attack VectorNETWORK
    Availability ImpactHIGH
    Base Score10
    Base SeverityCRITICAL
    Confidentiality ImpactHIGH
    Integrity ImpactHIGH
    Privileges RequiredNONE
    ScopeCHANGED
    User InteractionNONE
    Vector StringCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    Exploitability Score3.9
    Impact Score6
    Source[email protected]
    TypeSecondary

    Links:

    Exploit-db
    Github