CVE-2024-4681

Name of the Vulnerable Software and Affected Versions Campcodes Legal Case Management System version 1.0

Description A critical issue was found in the Setting Handler component, specifically in the /admin/general-setting file, where an unknown function is affected. The manipulation of the favicon/logo argument leads to unrestricted upload. This issue can be exploited remotely.

Recommendations For Campcodes Legal Case Management System version 1.0, as a temporary workaround, consider restricting access to the /admin/general-setting file until a patch is available. Avoid using the favicon/logo argument in the affected Setting Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.