CVE-2024-25832

8.8 highEPSS 13%

High (8.8) in f-logic datacube3. EPSS 13% chance of exploitation in the next 30 days.

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2024-02-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

f-logic:datacube3

References

https://neroteam.com/blog/f-logic-datacube3-vulnerability-report
https://neroteam.com/blog/f-logic-datacube3-vulnerability-report

Check your stack JSON