CVE-2024-57954

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-285

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-579557.5Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentialitCVE-2024-579567.5Out-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation of this vulnerability may affect availabilCVE-2024-579577.5Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affecCVE-2024-579589.1Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may cause features to perforCVE-2024-579599.8Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause features to performCVE-2024-57966.4The Infinite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘project_url’ parameter in all versions up to, and incCVE-2024-579607.5Input verification vulnerability in the ExternalStorageProvider module Impact: Successful exploitation of this vulnerability may affect servCVE-2024-579619.8Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause features to perform abCVE-2024-579627.5Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affCVE-2024-579637.3Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentialCVE-2024-579647.3Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentiaCVE-2024-579659.8In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted s
CVE-2024-57954: High severity, CVSS 7.5 | Vulnix