CVE-2024-7742

Summary

CVE-2024-7742 is a newly disclosed critical vulnerability affecting the wanglongcn ltcms 1.0.20 component API Endpoint. The issue lies within the multiDownload function of the /api/file/multiDownload file, which can be manipulated to trigger server-side request forgery. This vulnerability enables remote attackers to execute arbitrary commands, posing a significant security risk. Despite early disclosure to the vendor, they have yet to respond or provide a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.