Unrated severityCISA KEVNVD Advisory· Published Oct 27, 2024· Updated Oct 21, 2025

CVE-2024-50623

Description

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.

Affected products

Cleo/Harmonydescription

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

support.cleo.com/hc/en-us/articles/27140294267799-Cleo-Product-Security-Advisorymitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.075
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.060