CVE-2024-0784

Summary

CVE-2024-0784 is a newly disclosed critical vulnerability affecting hongmaple octopus version 1.0. The issue lies in an unknown function of the file /system/role/list, which is susceptible to SQL injection when the dataScope argument is manipulated. This vulnerability can be exploited remotely, meaning an attacker does not need to have local access to the system. The specific versions of the product that are affected or updated to address this issue are not known, as hongmaple octopus uses a rolling release model. The exploit for this vulnerability has already been made public, increasing the risk of potential attacks. The identifier for this vulnerability is VDB-251700.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.