CVE-2024-31615: Malicious File Upload
Published Apr 25, 2024
·Updated
ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.
Affected Software
2 affected components
ThinkCMF ThinkCMF
ThinkCMF ThinkCMF=6.0.9
Event History
Apr 25, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-31615?
CVE-2024-31615 is considered a high severity vulnerability due to its potential for arbitrary file uploads.
2
How do I fix CVE-2024-31615?
To fix CVE-2024-31615, update to the latest version of ThinkCMF or implement proper validation and restrictions on file uploads in the UeditorController.php.
3
What types of attacks can exploit CVE-2024-31615?
CVE-2024-31615 can be exploited for remote code execution and the upload of malicious files to the server.
4
Which versions of ThinkCMF are affected by CVE-2024-31615?
ThinkCMF 6.0.9 is specifically vulnerable to CVE-2024-31615.
5
Is CVE-2024-31615 being actively exploited in the wild?
There are indications that CVE-2024-31615 may be actively exploited, so immediate remediation is advised.