CVE-2024-2148

Summary

CVE-2024-2148 is a newly disclosed critical vulnerability affecting SourceCodester Online Mobile Management Store version 1.0. The issue lies in the /classes/Users.php file, where an unrestricted upload can be initiated by manipulating the img argument. This vulnerability can be exploited remotely and the exploit is currently public. The vulnerability has been assigned the identifier VDB-255501. Systems running this version of SourceCodester's Online Mobile Management Store are at risk and should be updated as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.