CVE-2024-48646

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-48646
An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files, such as HTML, scripts, or other executable content, that may be executed on the server, leading to further system compromise.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sage:sage_frp_1000:7.0.0:*:*:*:*:*:*:*
History

27 Jun 2025, 19:52

Type Values Removed Values Added
First Time Sage
Sage sage Frp 1000
References () https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md - () https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md - Exploit, Third Party Advisory
CPE cpe:2.3:a:sage:sage_frp_1000:7.0.0:*:*:*:*:*:*:*
Information

Published : 2024-10-30 18:15

Updated : 2025-06-27 19:52

NVD link : CVE-2024-48646

Mitre link : CVE-2024-48646

CVE.ORG link : CVE-2024-48646

JSON object : View

Products Affected

sage

  • sage_frp_1000
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type