← Database

CVE-2024-50623

CRITICAL CVSS: 9.8 Published: 2024-10-28 Modified: 2026-07-31

Description

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.

Affected Platforms

Cleo HarmonyCleo VltraderCleo Lexicom

Weakness Type

CWE-434, CWE-434, CWE-434

References