CVE-2024-50648: Path Traversal
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50648?
CVE-2024-50648 is classified as a high severity vulnerability due to its potential to enable remote code execution.
How do I fix CVE-2024-50648?
The mitigation for CVE-2024-50648 involves properly configuring file upload settings and ensuring that JSP file parsing is disabled.
Who is affected by CVE-2024-50648?
CVE-2024-50648 affects yshopmall version 1.0 and potentially any instances where the software is misconfigured.
What can an attacker achieve with CVE-2024-50648?
An attacker exploiting CVE-2024-50648 can gain remote code execution access, potentially allowing full control over the server.
What type of vulnerability is CVE-2024-50648?
CVE-2024-50648 is an arbitrary file upload vulnerability which can lead to critical security risks if not addressed.