CVE-2024-39717: Versa Director Dangerous File Type Upload Vulnerability
The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface. The “Change Favicon” (Favorite Icon) enables the upload of a .png file, which can be exploited to upload a malicious file with a .png extension disguised as an image. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
· high severity · unattributed attribution
Evidence and provenance
- Original source
- CISA KEV report ↗
- Published
- 2024-08-23T00:00:00Z
- Confidence basis
- No actor match
- Record ID
1038765f34f6e037d113
Vulnerabilities
CVE-2024-39717
Use and citation
Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.