CVE-2024-52450

Summary

CVE-2024-52450 is a newly disclosed vulnerability affecting the nBlocks PHP application. This issue arises from the improper handling of filename inclusion statements within the application, which enables an attacker to include local files on a targeted system. Consequently, this vulnerability, classified as PHP Local File Inclusion, can pose a significant risk to systems running nBlocks versions from n/a through 1.0.2. Rapid mitigation measures are recommended to prevent unauthorized access and potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.