NVD Vulnerability Detail
Search Exploit, PoC
CVE-2024-52302
Summary

common-user-management is a robust Spring Boot application featuring user management services designed to control user access dynamically. There is a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture. This endpoint allows file uploads without proper validation or restrictions, enabling attackers to upload malicious files that can lead to Remote Code Execution (RCE).

Publication Date Nov. 15, 2024, 1:15 a.m.
Registration Date Nov. 15, 2024, 5 a.m.
Last Update Nov. 15, 2024, 10:58 p.m.
Related information, measures and tools
Common Vulnerabilities List