CVE-2024-40552

Name of the Vulnerable Software and Affected Versions PublicCMS version 4.0.202302.e

Description A remote command execution issue was discovered, allowing attackers to execute commands via the cmdarray parameter at the /site/ScriptComponent.java endpoint.

Recommendations For PublicCMS version 4.0.202302.e, avoid using the cmdarray parameter in the /site/ScriptComponent.java endpoint until a fix is available. Consider restricting access to this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.