CVE-2024-7694
Description
ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.
Summary dbcve.org
ThreatSonar Anti-Ransomware from TeamT5 contains a file upload vulnerability where the application does not properly validate the content of uploaded files. An authenticated remote attacker with administrator privileges can upload malicious files containing arbitrary code, leading to command execution on the underlying server.
Mitigation
Implement strict file content validation (magic byte checking, file type verification) on all upload functions, restrict executable file extensions, and store uploaded files in a non-executable directory with proper access controls.