watchtowrlabs/CVE-2024-50623

PoC

Cleo Unrestricted file upload and download PoC (CVE-2024-50623)

view exploit source poc_in_githubauthor watchtowrlabspublished 2024-12-11catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-50623UScritical9.8OT criticalKEV
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan