High severityOSV Advisory· Published Nov 14, 2024· Updated Apr 15, 2026

CVE-2024-52302

Description

common-user-management is a robust Spring Boot application featuring user management services designed to control user access dynamically. There is a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture. This endpoint allows file uploads without proper validation or restrictions, enabling attackers to upload malicious files that can lead to Remote Code Execution (RCE).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Osamataher/Java Springboot CodebaseOSV
Osamataher/common-user-managementllm-create

Patches

Vulnerability mechanics

References

github.com/OsamaTaher/Java-springboot-codebase/commit/204402bb8b68030c14911379ddc82cfff00b8538nvd
github.com/OsamaTaher/Java-springboot-codebase/security/advisories/GHSA-rhcq-44g3-5xcxnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.003
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000