VULNERABILITY INTELLIGENCE

CVE-2024-50623

CVSS score9.8 CRITICAL
EPSS probability98.61%
CISA KEVKnown exploited vulnerability
Published2024-10-28
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Cleo Multiple Products Unrestricted File Upload Vulnerability

Vendor / product: Cleo / Multiple Products

Description

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.

Weakness classification

  • cve@mitre.org: CWE-434
  • nvd@nist.gov: CWE-434

Primary references