CVE-2024-56973

critical · 9.8

Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2 allows a remote attacker to execute arbitrary code via the source and filename parameters to the ProcessUploadFromURL.jsp component.

9.8

CVSS

0.9%

EPSS (exploit prob.)

58th

EPSS percentile

2025-02-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-281

References

https://gist.github.com/VAMorales/1092a29ac7d0b4b80d5c853b9a22a65d
https://gist.github.com/VAMorales/1092a29ac7d0b4b80d5c853b9a22a65d

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-56973