CVE-2024-24551

8.9 highEPSS 0.8%

High (8.9) in bludit bludit. EPSS 0.8% chance of exploitation in the next 30 days.

A security vulnerability has been identified in Bludit, allowing authenticated attackers to execute arbitrary code through the Image API. This vulnerability arises from improper handling of file uploads, enabling malicious actors to upload and execute PHP files.

Severity

CVSS 4.0

8.9 high

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWEs: CWE-77, CWE-434, CWE-502
Published: 2024-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bludit:bludit

References

https://www.redguard.ch/blog/2024/06/20/security-advisory-bludit/
https://www.redguard.ch/blog/2024/06/20/security-advisory-bludit/

Check your stack JSON