CVE-2024-38432

Matrix Tafnit v8

CWE-646: Reliance on File Name or Extension of Externally-Supplied File

Weakness

The product allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors. This could be used by attackers to cause the file to be misclassified and processed in a dangerous fashion.

Affected Software

Potential Mitigations

Related Attack Patterns

• https://cwe.mitre.org/data/definitions/209.html

References

• https://www.gov.il/en/Departments/faq/cve_advisories
• https://www.gov.il/en/Departments/faq/cve_advisories