CVE-2024-32491 - Vulnerability Details - OpenCVE

An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing paths. Arbitrary code can be executed if this location is publicly available through the web server.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00764.

Key SSVC decision points have not yet been added.

Vendors	Products
Znuny	Znuny

Configuration 1 [-]

OR	cpe:2.3:a:znuny:znuny:::::lts:::*
	cpe:2.3:a:znuny:znuny:::::-:::*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Znuny	Znuny

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.znuny.org/en/advisories/zsa-2024-01
https://znuny.com

History

Tue, 02 Sep 2025 21:30:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:znuny:znuny:::::-:::* cpe:2.3:a:znuny:znuny:::::lts:::*

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-04-29T00:00:00

Updated: 2024-08-02T02:13:39.090Z

Reserved: 2024-04-15T00:00:00

Link: CVE-2024-32491

Vulnrichment

Updated: 2024-08-02T02:13:39.090Z

NVD

Status : Analyzed

Published: 2024-04-29T17:15:19.183

Modified: 2025-09-02T21:21:38.100

Link: CVE-2024-32491

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-07-12T22:09:57Z

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-32491", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-02T02:13:39.090Z", "dateReserved": "2024-04-15T00:00:00", "datePublished": "2024-04-29T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-04-29T16:34:00.372485"}, "descriptions": [{"lang": "en", "value": "An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing paths. Arbitrary code can be executed if this location is publicly available through the web server."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://znuny.com"}, {"url": "https://www.znuny.org/en/advisories/zsa-2024-01"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-32491", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-04-30T15:40:28.004509Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:znuny:znuny:6.0.31:*:*:*:lts:*:*:*"], "vendor": "znuny", "product": "znuny", "versions": [{"status": "affected", "version": "6.0.31", "versionType": "custom", "lessThanOrEqual": "6.5.7"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:znuny:znuny:7.0.1:*:*:*:-:*:*:*"], "vendor": "znuny", "product": "znuny", "versions": [{"status": "affected", "version": "7.0.1", "versionType": "custom", "lessThanOrEqual": "7.016"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:52:07.388Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:13:39.090Z"}, "title": "CVE Program Container", "references": [{"url": "https://znuny.com", "tags": ["x_transferred"]}, {"url": "https://www.znuny.org/en/advisories/zsa-2024-01", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://znuny.com", "tags": ["x_transferred"]}, {"url": "https://www.znuny.org/en/advisories/zsa-2024-01", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:13:39.090Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-32491", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-04-30T15:40:28.004509Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:znuny:znuny:6.0.31:*:*:*:lts:*:*:*"], "vendor": "znuny", "product": "znuny", "versions": [{"status": "affected", "version": "6.0.31", "versionType": "custom", "lessThanOrEqual": "6.5.7"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:znuny:znuny:7.0.1:*:*:*:-:*:*:*"], "vendor": "znuny", "product": "znuny", "versions": [{"status": "affected", "version": "7.0.1", "versionType": "custom", "lessThanOrEqual": "7.016"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-04-30T15:39:00.237Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://znuny.com"}, {"url": "https://www.znuny.org/en/advisories/zsa-2024-01"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing paths. Arbitrary code can be executed if this location is publicly available through the web server."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-04-29T16:34:00.372485"}}}, "cveMetadata": {"cveId": "CVE-2024-32491", "state": "PUBLISHED", "dateUpdated": "2024-08-02T02:13:39.090Z", "dateReserved": "2024-04-15T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-04-29T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:znuny:znuny:*:*:*:*:lts:*:*:*", "matchCriteriaId": "E616E701-B053-44AD-B63F-A56EB0AB6A73", "versionEndIncluding": "6.5.7", "versionStartIncluding": "6.0.31", "vulnerable": true}, {"criteria": "cpe:2.3:a:znuny:znuny:*:*:*:*:-:*:*:*", "matchCriteriaId": "773D66F5-535A-4EF9-A078-078B77470959", "versionEndIncluding": "7.0.16", "versionStartIncluding": "7.0.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing paths. Arbitrary code can be executed if this location is publicly available through the web server."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Znuny y Znuny LTS 6.0.31 a 6.5.7 y Znuny 7.0.1 a 7.0.16 donde un usuario que inici\u00f3 sesi\u00f3n puede cargar un archivo (a trav\u00e9s de una solicitud AJAX manipulada) a una ubicaci\u00f3n de escritura arbitraria atravesando rutas. Se puede ejecutar c\u00f3digo arbitrario si esta ubicaci\u00f3n est\u00e1 disponible p\u00fablicamente a trav\u00e9s del servidor web."}], "id": "CVE-2024-32491", "lastModified": "2025-09-02T21:21:38.100", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-04-29T17:15:19.183", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.znuny.org/en/advisories/zsa-2024-01"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://znuny.com"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.znuny.org/en/advisories/zsa-2024-01"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://znuny.com"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}