CVE-2024-4461

Name of the Vulnerable Software and Affected Versions SugarSync versions prior to 4.1.3

Description The issue is related to an unquoted path or search item vulnerability. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.

Recommendations For versions prior to 4.1.3, update to version 4.1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the service path to minimize the risk of exploitation.