CVE-2024-49254
Improper Control of Generation of Code ('Code Injection') (CWE-94)
Published: Oct 16, 2024 / Updated: 34d ago
010
CVSS 10EPSS 0.04%Critical
CVE info copied to clipboard
Improper Control of Generation of Code ('Code Injection') vulnerability in Sunjianle allows Code Injection.This issue affects ajax-extend: from n/a through 1.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Timeline
CVE Assignment
NVD published the first details for CVE-2024-49254
Oct 16, 2024 at 2:15 PM
First Article
Feedly found the first article mentioning CVE-2024-49254. See article
Oct 16, 2024 at 2:21 PM / National Vulnerability Database
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Oct 16, 2024 at 2:21 PM
EPSS
EPSS Score was set to: 0.04% (Percentile: 9.7%)
Oct 17, 2024 at 10:04 AM
Attack Patterns
CAPEC-242: Code Injection
+null more
News
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 14, 2024 to October 20, 2024)
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week: WordPress Plugins with Reported Vulnerabilities Last Week
CVE Alert: CVE-2024-49254
Affected Endpoints: Everyone that supports the site helps enable new functionality.
NA - CVE-2024-49254 - Improper Control of Generation of Code...
Improper Control of Generation of Code ('Code Injection') vulnerability in Sunjianle allows Code Injection.This issue affects ajax-extend: from n/a through 1.0.
CVE-2024-49254
Improper Control of Generation of Code ('Code Injection') vulnerability in Sunjianle allows Code Injection.This issue affects ajax-extend: from n/a through...
CVE-2024-49254 - Sunjianle Ajax-Extend Code Injection
CVE ID : CVE-2024-49254 Published : Oct. 16, 2024, 2:15 p.m. 17 minutes ago Description : Improper Control of Generation of Code ('Code Injection') vulnerability in Sunjianle allows Code Injection.This issue affects ajax-extend: from n/a through 1.0. Severity: 10.0
See 3 more articles and social media posts