CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-11-26
ProjectSend options.php Authentication Bypass and Remote Code Execution (RCE) Vulnerability (CVE-2024-11680) Analysis and Mitigation Guide
[Affected Scope] ProjectSend file sharing platform versions prior to r1720
[Impact] Unauthenticated remote attackers can bypass authentication via options.php to modify application configurations, create unauthorized accounts, upload webshells, and execute arbitrary code
[Mitigation] Immediately upgrade ProjectSend to version r1720 or later, and restrict external access to options.php as a temporary workaround