CVE-2024-0505
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 13, 2024
Updated: May 17, 2024
CWE ID 434
Summary
CVE-2024-0505 is a critical vulnerability affecting the ZhongFuCheng3y Austin 1.0 software. The issue lies within the getFile function of the MaterialController.java component (com/java3y/austin/web/controller/MaterialController.java) and results in an unrestricted upload vulnerability. This flaw has been disclosed to the public and may be exploited by attackers. The associated vulnerability identifier is VDB-250619.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share