CVE-2024-2604

Name of the Vulnerable Software and Affected Versions SourceCodester File Manager App version 1.0

Description A critical issue has been found in the SourceCodester File Manager App, affecting the /endpoint/update-file.php file. The manipulation of the file argument leads to unrestricted upload. This issue can be exploited remotely.

Recommendations For SourceCodester File Manager App version 1.0, consider disabling the /endpoint/update-file.php endpoint until a patch is available to prevent unrestricted file uploads. Restrict access to this endpoint to minimize the risk of exploitation. Avoid using the file argument in the affected endpoint until the issue is resolved.