CVE Vulnerabilities

CVE-2024-38432

Reliance on File Name or Extension of Externally-Supplied File

Published: Jul 30, 2024 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Matrix Tafnit v8

CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Weakness

The product allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors. This could be used by attackers to cause the file to be misclassified and processed in a dangerous fashion.

Affected Software

NameVendorStart VersionEnd Version
TafnitMatrix-globalservices*8.4.202 (excluding)

Potential Mitigations

References