PT-2024-34917
CVE-2024-51790
·
Published
2024-11-10
·
Updated
2024-11-12
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Team HB WEBSOL HB AUDIO GALLERY versions n/a through 3.0
Description
The issue allows an attacker to upload a web shell to a web server due to an Unrestricted Upload of File with Dangerous Type vulnerability. This enables the potential execution of malicious code on the server.
Recommendations
For versions n/a through 3.0, update to version 3.0 to patch the vulnerability effectively. As a temporary workaround, consider restricting file uploads to prevent potential exploitation until the update can be applied.
Found an issue in the description? Have something to add? Feel free to write us 👾