UNKNOWNKNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2024-50623

Cleo Multiple Products Unrestricted File Upload Vulnerability

Published: 2024-12-13
Modified: 2026-07-31
Sources: cisa-kev

Summary

Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download vulnerability that can lead to remote code execution with elevated privileges.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.