CVE-2024-8338

HOCH 8.8CVE-2024-8338 · Published 30/08/2024 · updated 17/06/2026

Kurz gesagt

CVE-2024-8338 ist eine Schwachstelle (HOCH (CVSS 8.8)) in shudong-share (hfo4).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.50%, höher als bei 43.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
shudong-share hfo4	`= 2.4.7`	No fix yet

Description

A vulnerability was found in HFO4 shudong-share 2.4.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /includes/fileReceive.php of the component File Extension Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

enjoyworld/webray.com.cn · Third Party Advisory
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free