CVE-2024-52306CWE-502

FileManager Deserialization of Untrusted Data

High · published November 13, 2024

CVSS v3.1
7.7
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerability is fixed in 3.0.9.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00625 · 49.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-11-13T15:15Z
EPSS history
Timeline
  • 13 NOV 15:15Z
    FileManager Deserialization of Untrusted Data
    cvelistv5