VULNERABILITY INTELLIGENCE

CVE-2024-50648

CVSS score9.8 CRITICAL

EPSS probability1.01%

CISA KEVNot currently listed

Published2024-11-15

Last modified2026-06-17

Description

yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.