CVE-2024-3778 Ai3 QbiBot - Unrestricted File Upload
Remote attackers with administrator privileges can upload malicious files to Ai3 QbiBot, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-3778?
CVE-2024-3778 is a high-severity vulnerability in Ai3 QbiBot , published on 15 Apr 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.
Weakness: CWE-434
Which versions are affected by CVE-2024-3778?
It affects 1 product.
Products include Ai3 Qbibot.
How do I fix CVE-2024-3778?
No fix has been published for CVE-2024-3778 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-3778 being exploited?
There is no known exploitation of CVE-2024-3778 in the wild and no public exploit code.
Other vulnerabilities in Ai3 QbiBot
Sources
Also known as GHSA-895x-rw6g-623x.