CVE-2024-4921

Summary

CVE-2024-44921 represents a critical vulnerability in the SourceCodester Employee and Visitor Gate Pass Logging System 1.0. An issue lies within an unidentified function of the file /employee_gatepass/classes/Users.php?f=ssave. Manipulation of the 'img' argument triggers an unrestricted upload, opening the door for remote attacks. The exploit for this vulnerability, identified as VDB-264456, has been made public and may be actively used by attackers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.