VULNERABILITY INTELLIGENCE

CVE-2024-57248

CVSS score6.3 MEDIUM
EPSS probability3.21%
CISA KEVNot currently listed
Published2025-02-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass access controls, and upload malicious files.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22

Primary references