CVE-2024-51243: Code Injection
Published Oct 30, 2024
·Updated
The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control all application deployment servers of this management system via DeployController.java.
Affected Software
2 affected components
eladmin eladmin<2.7
eladmin eladmin<=2.7
Event History
Oct 30, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-51243?
CVE-2024-51243 is classified as a critical severity vulnerability due to its remote code execution capability.
2
How do I fix CVE-2024-51243?
To mitigate CVE-2024-51243, upgrade eladmin to version 2.8 or later, which addresses this vulnerability.
3
What makes CVE-2024-51243 dangerous?
CVE-2024-51243 allows an attacker to execute arbitrary code on all application deployment servers, potentially leading to complete system compromise.
4
Which versions of eladmin are vulnerable to CVE-2024-51243?
Versions of eladmin up to and including 2.7 are vulnerable to CVE-2024-51243.
5
Can CVE-2024-51243 be exploited remotely?
Yes, CVE-2024-51243 can be exploited remotely, allowing attackers to gain control over the affected systems.