CVE-2024-51055
Hoosk
CVE-2024-51055 is a code execution vulnerability in Hoosk v1.7.1, allowing remote attackers to execute arbitrary code by crafting a malicious script targeting the config.php component. While the CVSS score is 6.5, indicating a medium severity, the SOCRadar Vulnerability Risk Score (SVRS) is 30, suggesting a lower level of immediate threat compared to critical vulnerabilities with scores above 80. This vulnerability is categorized as CWE-79, often related to Cross-Site Scripting (XSS), though the description indicates direct code execution. Attackers could potentially compromise the server. Given it is tagged as 'In The Wild', exploitation is actively occurring so organizations using Hoosk v1.7.1 should apply necessary patches or mitigations. Even with a lower SVRS, the risk of remote code execution makes this a significant security concern.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.