CVE-2024-11680 ProjectSend ProjectSend
ProjectSend contains an improper authentication vulnerability that allows a remote, unauthenticated attacker to enable unauthorized modification of the application's configuration via crafted HTTP requests to options.php. Successful exploitation allows attackers to create accounts, upload webshells, and embed…
- CVSS
- not scored
On CISA’s exploited list
ProjectSend Improper Authentication Vulnerability
- Added
- 2024-12-03
- Federal patch deadline
- 2024-12-24
- Ransomware use
- not known