CVE-2024-1264

Summary

CVE-2024-1264 is a newly disclosed critical vulnerability affecting Juanpao JPShop versions up to 1.5.02. The vulnerability lies in the function actionUpdate of the file /api/controllers/common/UploadsController.php. An attacker can exploit this flaw by manipulating the 'image' argument, leading to unrestricted upload. The attack can be launched remotely, making it a significant threat. The exploit for this vulnerability has been disclosed to the public, increasing the risk of exploitation. The associated identifier for this vulnerability is VDB-253003.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.