CVE-2024-57968

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
Advantive	VeraCore	< 2024.4.2.1

References

https://advantive.my.site.com/support/s/article/VeraCore-Release-Notes-2024-4-2-1Permissions Required, Product, Release Notes
https://intezer.com/blog/research/xe-group-exploiting-zero-days/Exploit, Technical Description, Third Party Advisory
https://www.solissecurity.com/en-us/insights/xe-group-from-credit-card-skimming-to-exploiting-zero-days/Exploit, Technical Description, Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57968US Government Resource

Timeline

Published: Feb 3, 2025
Last modified: Jun 17, 2026
Added to CISA KEV: Mar 10, 2025
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-579694.3app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.CVE-2024-579704.0libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive bec CVE-2024-579719.1DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occur CVE-2024-579726.5The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Windows Holographic) t CVE-2024-579735.5In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_l CVE-2024-579744.7In the Linux kernel, the following vulnerability has been resolved: udp: Deal with race between UDP socket address change and rehash If a CVE-2024-579755.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when run_delalloc_nocow() failed [BUG] CVE-2024-579765.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cow_file_range() failed [BUG] When CVE-2024-579775.5In the Linux kernel, the following vulnerability has been resolved: memcg: fix soft lockup in the OOM process A soft lockup issue was foun CVE-2024-579785.5In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Fix potential error pointer dereference in detach_pm()CVE-2024-579797.8In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing CVE-2024-57987.5Vault and Vault Enterprise did not properly validate the JSON Web Token (JWT) role-bound audience claim when using the Vault JWT auth method