PT-2024-35246 · Unknown · Basepress Migration Tools

·

CVE-2024-52407

·

Published

2024-11-16

·

Updated

2024-11-21

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions BasePress Migration Tools versions 1.0.0 and earlier
Description The issue allows an attacker to upload a web shell to a web server by exploiting an Unrestricted Upload of File with Dangerous Type vulnerability in the BasePress Migration Tools. This vulnerability can be used to upload dangerous file types to a web server.
Recommendations For versions 1.0.0 and earlier, update to version 1.0.1 to stay protected. As a temporary workaround, consider restricting file uploads to prevent potential exploitation until the update is applied.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-52407

Affected Products

Basepress Migration Tools