CVE-2024-4306

HIGH 8.8CVE-2024-4306 · Published 29/04/2024 · updated 17/06/2026

In short

CVE-2024-4306 is a HIGH (CVSS 8.8) vulnerability affecting hubbank (ofofonobsdev).
Chance of exploitation in the next 30 days (EPSS): 0.69%, higher than 53.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hubbank ofofonobsdev	`= 1.0.2`	No fix yet

Description

Critical unrestricted file upload vulnerability in HubBank affecting version 1.0.2. This vulnerability allows a registered user to upload malicious PHP files via upload document fields, resulting in webshell execution.

References

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-hubbank · Third Party Advisory

More vulnerabilities in hubbank

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free