CVE-2024-48450: SSRF
Published Oct 25, 2024
·Updated
An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into chat group.
Affected Software
1 affected component
Huly Platform
Event History
Oct 25, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-48450?
CVE-2024-48450 has a medium severity rating of 6.5 according to CVSS 3.1.
2
What does CVE-2024-48450 impact?
CVE-2024-48450 impacts Huly Platform version 0.6.295 allowing for arbitrary file uploads.
3
How do attackers exploit CVE-2024-48450?
Attackers exploit CVE-2024-48450 by uploading a crafted HTML file into a chat group to execute arbitrary code.
4
What is the risk level of CVE-2024-48450?
CVE-2024-48450 carries a risk level of 37, indicating potential serious implications.
5
How can I mitigate CVE-2024-48450?
Mitigating CVE-2024-48450 requires applying vendor-provided patches and restricting file uploads in the Huly Platform.