ID:11926 - Exploit for Arbitrary file upload in Versa Director - CVE-2024-39717

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to compromise vulnerable system.

The vulnerability exists due to insufficient validation of file during file upload. A remote authenticated user can upload a malicious file and execute it on the server.

Note, the vulnerability is being actively exploited in the wild.

Remediation