VulnerabilityAnalyzed
CVE-2024-57248
Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass…
MEDIUM 6.3EPSS 3.21%
Does this matter?
Lower severity and a low EPSS score (3.21%). Track it; it rarely justifies an emergency change on its own.
Description
Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass access controls, and upload malicious files.
- CVSS 3.1
- 6.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- EPSS
- 3.21% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- gleamtech/filevista
- Source
- cve@mitre.org
References
- https://packetstorm.news/files/id/189021Exploit, Third Party Advisory
- https://www.gleamtech.com/filevistaProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.