← Back

CVE-2024-50623

nvd nistnuclei
Published: Oct 28, 2024Modified: Nov 5, 2025CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.

Affected (3)

Cleo
3 products
Harmony
Lexicom
Vltrader
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Harmony
Before 5.8.0.21
Lexicom
Before 5.8.0.21
Vltrader
Before 5.8.0.21

Related CWEs

CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.