github.com
https://github.com/OpenXP-Research/CVE-2024-48359 CVE-2024-48359
CRITICAL
Record summary
CVE-2024-48359 has a selected CVSS score of 9.8 (critical); EIP currently links 1 repository PoC.
Description
Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 1, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
qualitorBrowse qualitor / qualitorDefault status: unknown | CVE List | 8.24 | affected |
Proofs of concept
1Repository PoCs
GitHubOpenXP-Research/CVE-2024-48359Repository PoCby OpenXP-ResearchStars: 1Not analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-48359 qualitor.com.br
https://www.qualitor.com.br/official-security-advisory-cve-2024-48359