What’s Vulnerable › Vulnerabilities

CVE-2024-24551: Bludit - Remote Code Execution (RCE) through Image API

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-06-24 · updated 2026-06-17
• Weakness: CWE-77

Description

A security vulnerability has been identified in Bludit, allowing authenticated attackers to execute arbitrary code through the Image API. This vulnerability arises from improper handling of file uploads, enabling malicious actors to upload and execute PHP files.

Affected products

• Bludit: through 3.15.0

References

• https://www.redguard.ch/blog/2024/06/20/security-advisory-bludit/
• https://www.redguard.ch/blog/2024/06/20/security-advisory-bludit/

Get alerted when CVE-2024-24551 or the next vulnerability affects your stack