CVE-2024-50623
Cleo Multiple Products Unrestricted File Upload Vulnerability
⚠ KEVEPSS 98.5%
描述
Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download vulnerability that can lead to remote code execution with elevated privileges.
如何修補 CVE-2024-50623
OSV 沒有提供套件對應 — 請參考下方連結尋找廠商提供的建議。
CVE-2024-50623 正在被利用嗎?
是 — CVE-2024-50623 已列入 CISA Known Exploited Vulnerabilities (KEV) 清單,代表正在被實際利用,請立即修補。
受影響套件(0)
OSV 沒有提供套件對應。