CVE-2024-48594

File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

3.37% chance of exploitation in the next 30 days, 88th percentile

Published

2024-10-28

Updated

2024-10-30

Proof-of-concept exploits (1)

• Aa1b/mycve/blob/main/Readme.md

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/prison_management_rce…

References

• CVE Record
• NVD entry

Related

• CVE-2024-48591
• CVE-2024-4860
• CVE-2024-48590
• CVE-2024-48605
• CVE-2024-48581
• CVE-2024-48615