CVE-2024-54448: Remote Code Execution (RCE) via Automation Scripting
The Automation Scripting functionality can be exploited by attackers to run arbitrary system commands on the underlying operating system. An account with administrator privileges or that has been explicitly granted access to use Automation Scripting is needed to carry out the attack. Exploitation of this vulnerability would allow an attacker to run commands of their choosing on the underlying operating system of the web server running LogicalDOC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54448?
CVE-2024-54448 is considered a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary system commands.
How do I fix CVE-2024-54448?
To fix CVE-2024-54448, ensure that you update to the latest version of LogicalDOC that includes security patches addressing this vulnerability.
Who is affected by CVE-2024-54448?
CVE-2024-54448 affects LogicalDOC users who have accounts with administrator privileges or specific access to Automation Scripting.
What are the potential impacts of exploiting CVE-2024-54448?
Exploiting CVE-2024-54448 could allow an attacker to execute arbitrary commands on the underlying operating system, leading to data breaches or system compromise.
What type of access is required to exploit CVE-2024-54448?
An attacker must have administrator privileges or be explicitly granted access to Automation Scripting to exploit CVE-2024-54448.