CVE-2024-32161

CriticalCVSS 9.8

Published: 17/04/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.71%

49th percentile - higher than 49% of all known CVEs

Summary

JizhiCMS 2.5 suffers from a file upload vulnerability due to insufficient validation. An attacker can upload a malicious file, potentially leading to remote code execution.

Risk Assessment

The risk for the organization includes potential server compromise through malicious file upload, which could lead to data loss or system integrity breach.

Recommendation

It is recommended to immediately update JizhiCMS to the latest version and implement file type validation and size restrictions.

Original NVD description (English source)

jizhiCMS 2.5 suffers from a File upload vulnerability.