CVE-2024-54449: Remote Code Execution (RCE) via Arbitrary File Write In Document API
The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on the underlying file system. This can be used to facilitate RCE. An account with ‘read’ and ‘write’ privileges on at least one existing document in the application is required to exploit the vulnerability. Exploitation of this vulnerability would allow an attacker to run commands of their choosing on the underlying operating system of the web server running LogicalDOC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54449?
CVE-2024-54449 is rated as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2024-54449?
To fix CVE-2024-54449, ensure that you apply the latest security patches provided by LogicalDOC and review access permissions for the affected API endpoints.
What are the potential impacts of CVE-2024-54449?
The potential impacts of CVE-2024-54449 include unauthorized file writing and possible remote code execution on the server.
Who is affected by CVE-2024-54449?
CVE-2024-54449 affects users of LogicalDOC software that utilize the vulnerable API endpoints for document interactions.
What should I do if I suspect exploitation of CVE-2024-54449?
If you suspect exploitation of CVE-2024-54449, immediately audit your system for unauthorized file changes and isolate affected systems while you investigate.