High severity8.8NVD Advisory· Published Jun 24, 2024· Updated Jun 17, 2026
CVE-2024-4748
CVE-2024-4748
Description
The CRUDDIY project is vulnerable to shell command injection via sending a crafted POST request to the application server. The exploitation risk is limited since CRUDDIY is meant to be launched locally. Nevertheless, a user with the project running on their computer might visit a website which would send such a malicious request to the locally launched server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3- cert.pl/en/posts/2024/06/CVE-2024-4748nvdThird Party Advisory
- cert.pl/posts/2024/06/CVE-2024-4748nvdThird Party Advisory
- github.com/jan-vandenberg/cruddiy/issues/67nvdIssue Tracking
News mentions
0No linked articles in our index yet.