CVE-2024-25153: Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25153?
CVE-2024-25153 is considered a critical vulnerability due to its potential for unauthorized file uploads.
How do I fix CVE-2024-25153?
To mitigate CVE-2024-25153, upgrade to FileCatalyst Workflow version 5.1.6 or higher to ensure the vulnerability is patched.
What software is affected by CVE-2024-25153?
CVE-2024-25153 affects FileCatalyst Workflow versions up to and including 5.1.6.
What does CVE-2024-25153 exploit?
CVE-2024-25153 exploits a directory traversal vulnerability in the 'ftpservlet' of the FileCatalyst Workflow Web Portal.
Can I report incidents related to CVE-2024-25153?
Yes, incidents related to CVE-2024-25153 should be reported directly to the vendor, Fortra.