coldbraid

CVE-2024-39717 Versa Director

The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface. The “Change Favicon” (Favorite Icon) enables the upload of a .png file, which can…

CVSS
not scored

CWE-434

On CISA’s exploited list

Versa Director Dangerous File Type Upload Vulnerability

Added
2024-08-23
Federal patch deadline
2024-09-13
Ransomware use
not known