Critical severity10.0NVD Advisory· Published Jan 17, 2024· Updated Jun 17, 2026

CVE-2024-0643

Description

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cires21/Live Mosaicllm-fuzzy
Range: = 5.3
Cires21/C21 Live Encoderllm-fuzzy2 versions
= 5.3+ 1 more
- (no CPE)range: = 5.3
- (no CPE)range: 5.3

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cires21-productsnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000