{"cvss":9.8,"datePublished":"2024-12-13","dateUpdated":"2024-12-13","description":"Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download vulnerability that can lead to remote code execution with elevated privileges.","dueDate":"2025-01-03","id":"CVE-2024-50623","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update ; https://nvd.nist.gov/vuln/detail/CVE-2024-50623","product":"Multiple Products","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Cleo Multiple Products Unrestricted File Upload Vulnerability","vendor":"Cleo"}