PT-2024-33465 · Sovratec · Sovratec Case Management

·

CVE-2024-49324

·

Published

2024-10-20

·

Updated

2024-10-24

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Sovratec Case Management versions n/a through 1.0.0
Description The issue allows an attacker to upload a web shell to a web server, which can lead to further exploitation. This is due to an Unrestricted Upload of File with Dangerous Type vulnerability in Sovratec Case Management.
Recommendations For versions n/a through 1.0.0, update to version 1.0.1 to patch this security flaw. As a temporary workaround, consider restricting file uploads to prevent potential exploitation until the update is applied.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-49324

Affected Products

Sovratec Case Management