CVE-2024-1527: Unrestricted Upload of File with Dangerous Type in CMS Made Simple
Published Mar 12, 2024
·Updated
Unrestricted file upload vulnerability in CMS Made Simple, affecting version 2.2.14. This vulnerability allows an authenticated user to bypass the security measures of the upload functionality and potentially create a remote execution of commands via webshell.
Affected Software
2 affected components
CMS Made Simple CMS Made Simple
CMSmadesimple CMS Made Simple=2.2.14
Remediation
Information
There is no reported solution at this time.
Event History
Mar 12, 2024
CVE Published
via MITRE·03:19 PM
Data Sourced
via MITRE·03:19 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-1527?
CVE-2024-1527 is classified as a high severity vulnerability due to its potential to allow remote command execution.
2
How do I fix CVE-2024-1527?
To fix CVE-2024-1527, upgrade CMS Made Simple to version 2.2.15 or later.
3
Which versions of CMS Made Simple are affected by CVE-2024-1527?
CVE-2024-1527 affects CMS Made Simple version 2.2.14 and earlier versions.
4
What types of attacks can be executed through CVE-2024-1527?
CVE-2024-1527 allows attackers to upload malicious files, potentially leading to remote command execution through webshells.
5
Is authentication required to exploit CVE-2024-1527?
Yes, an authenticated user can exploit CVE-2024-1527 to bypass security measures.