Skip to content
OpenAdvisories
High · 8.9 CVE-2024-24551 EUVD-2024-21969GHSA-2xxr-prx9-m533

Bludit - Remote Code Execution (RCE) through Image API

Published Jun 24, 2024 · Updated Aug 1, 2024 · Assigned by NCSC.ch

Description

A security vulnerability has been identified in Bludit, allowing authenticated attackers to execute arbitrary code through the Image API. This vulnerability arises from improper handling of file uploads, enabling malicious actors to upload and execute PHP files.

Affected products

VendorProductAffectedFixed
Bludit Bludit v3.9.0 beta 1 —

References