CVE-2024-48646: Malicious File Upload
An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files, such as HTML, scripts, or other executable content, that may be executed on the server, leading to further system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48646?
CVE-2024-48646 is categorized as a high severity vulnerability due to the potential for unauthorized file execution.
How do I fix CVE-2024-48646?
To fix CVE-2024-48646, implement proper file validation checks to restrict allowed file types during upload.
Who is affected by CVE-2024-48646?
CVE-2024-48646 affects users of Sage 1000 v7.0.0 that allow file uploads without validation.
What types of attacks can exploit CVE-2024-48646?
Attackers can exploit CVE-2024-48646 by uploading malicious files, including HTML and executable scripts, leading to potential code execution.
Can CVE-2024-48646 be exploited remotely?
Yes, CVE-2024-48646 can be exploited remotely by authorized users who gain access to the file upload feature.