CVE-2024-4681 : faille élevée campcodes legal case management system (CVSS 7.2)

A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/general-setting of the component Setting Handler. The manipulation of the argument favicon/logo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263622 is the identifier assigned to this vulnerability.

Sévérité

Élevée (CVSS 7.2)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

14 mai 2024

Dernière mise à jour

17 juin 2026

• campcodes legal case management system

• Fiche CVE-2024-4681 sur le NVD (NIST)
• github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%…
• vuldb.com/
• vuldb.com/
• vuldb.com/