CVE-2024-2622

Summary

CVE-2024-2622 is a newly disclosed critical vulnerability affecting the Fujian Kelixin Communication Command and Dispatch Platform up to version 20240318. The issue lies in an unknown part of the file /api/client/editemedia.php, where manipulation of the argument number/enterprise_uuid can lead to SQL injection. This vulnerability enables remote attacks and has been publicly disclosed, increasing the risk of exploitation. The associated identifier for this vulnerability is VDB-257199.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.