CVE-2024-57968

Description

Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to unintended folders via upload.apsx.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2024-57968
• https://advantive.my.site.com/support/s/article/VeraCore-Release-Notes-2024-4-2-1
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-53868
• https://intezer.com/blog/research/xe-group-exploiting-zero-days/
• https://www.solissecurity.com/en-us/insights/xe-group-from-credit-card-skimming-to-exploiting-zero-days/