CVE-2024-48734
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Unrestricted file upload in SAS Studio 9.4 via the path /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} may allow a remote attacker to upload malicious files. The vendor disputes this, stating that file upload is only allowed for authorized users.
Risk Assessment
The risk involves potential unauthorized upload of malicious files, which could compromise system integrity or enable further attacks. However, the vendor's dispute suggests the risk may be limited to authorized users.
Recommendation
Implement strict access controls on the file upload path and validate file types and contents. Monitor logs for unauthorized upload attempts.
Other vulnerabilities in SAS Studio
See all- CVE-2024-48735High
A Directory Traversal vulnerability in SAS Studio 9.4 allows a remote attacker to access internal files by manipulating the default path during file download. The attack requires knowledge of the session ID and internal path.
- CVE-2024-48733High
SQL injection vulnerability in SAS Studio 9.4 at /SASStudio/sasexec/sessions/{sessionID}/sql allows a remote attacker to execute arbitrary SQL commands via the POST body request. The vendor disputes this, stating that SQL statement execution is allowed for authorized users.
Original NVD description (English source)
Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files. NOTE: this is disputed by the vendor because file upload is allowed for authorized users.