CVE-2024-32954

CVSS 3.1 Score 9.1 of 10 (high)

Details

Published Apr 24, 2024
CWE ID 434

Summary

CVE-2024-32954 is a newly disclosed vulnerability that impacts Tribulant Newsletters. The issue permits an unrestricted file upload, allowing an attacker to upload files of dangerous types. This vulnerability can potentially lead to serious security consequences. The affected Newsletters version range is from n/a to 4.9.5. It is strongly recommended that users upgrade to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share