CVE-2024-1819: CodeAstro Membership Management System Add Members Tab unrestricted upload
First published: Fri Feb 23 2024(Updated: )
A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254607.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CodeAstro Membership Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-1819?
CVE-2024-1819 has been classified as a critical vulnerability.
How do I fix CVE-2024-1819?
To fix CVE-2024-1819, restrict the file upload functionality for the Member Photo argument.
What component is affected by CVE-2024-1819?
CVE-2024-1819 affects the Add Members Tab component of the CodeAstro Membership Management System.
What type of attack can CVE-2024-1819 allow?
CVE-2024-1819 can allow unrestricted file uploads, which may lead to further exploitation.
Which version of CodeAstro Membership Management System is impacted by CVE-2024-1819?
CVE-2024-1819 impacts version 1.0 of the CodeAstro Membership Management System.
- agent/weakness
- agent/title
- agent/type
- agent/references
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/codeastro
- canonical/codeastro membership management system
- version/codeastro membership management system/1.0