CVE-2024-2849: SourceCodester Simple File Manager unrestricted upload

Published Mar 23, 2024

Updated

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257770 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Ganeshrkt Simple File Manager Web App=1.0

Sourcecodester Simple File Manager

Event History

Mar 23, 2024

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Jan 25, 57107

Event

via NVD·08:35 PM

Frequently Asked Questions

What is the severity of CVE-2024-2849?

CVE-2024-2849 is classified as a critical vulnerability.

How does CVE-2024-2849 operate?

CVE-2024-2849 allows an attacker to perform an unrestricted file upload by manipulating the photo argument.

Who is affected by CVE-2024-2849?

CVE-2024-2849 affects users of SourceCodester Simple File Manager version 1.0.

What is the potential impact of CVE-2024-2849?

The impact of CVE-2024-2849 includes the possibility of remote code execution due to unauthorized file uploads.

How do I fix CVE-2024-2849?

To fix CVE-2024-2849, update the Simple File Manager to the latest version or apply security patches as provided by the vendor.