Vulnerability · Published Mar 13, 2024 · Assigned by Fortra
CVE-2024-25153Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
Critical 9.8
In plain English
A critical-severity security flaw in FileCatalyst from Fortra. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 41.7% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortra | FileCatalyst | 5.1.4 – before 5.1.6 |
Weakness: CWE-472 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H