Unrated severityNVD Advisory· Published Feb 8, 2024· Updated May 8, 2025

CVE-2024-24350

Description

File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary code via the extension filtering component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Software Publico/e-Sic Livredescription
Softwarepublico/e-Sic Livrellm-create
Range: <=2.0

Patches

Vulnerability mechanics

References

gist.github.com/viniciuspinheiros/4e53b297fd6466cf12d01867ee1c9c33mitre
medium.com/%40viniciuspinheiros/e-sic-livre-2-0-authenticated-file-upload-leads-to-remote-code-execution-rce-5937c9537258mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000