CVE-2024-7658

Name of the Vulnerable Software and Affected Versions ProjectSend versions up to r1605

Description A vulnerability has been found in ProjectSend, affecting the get preview function of the process.php file. This issue leads to improper control of resource identifiers and can be initiated remotely. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited.

Recommendations For ProjectSend versions up to r1605, upgrade to version r1720 to address this issue. As a temporary workaround, consider disabling the get preview function of the process.php file until the patch is applied. Restrict access to the process.php file to minimize the risk of exploitation.