CVE-2024-48646

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-48646
An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files, such as HTML, scripts, or other executable content, that may be executed on the server, leading to further system compromise.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sage:sage_frp_1000:7.0.0:*:*:*:*:*:*:*
History

27 Jun 2025, 19:52

Type Values Removed Values Added
First Time Sage sage Frp 1000
Sage
CPE cpe:2.3:a:sage:sage_frp_1000:7.0.0:*:*:*:*:*:*:*
References () https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md - () https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md - Exploit, Third Party Advisory

31 Oct 2024, 18:35

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de carga de archivos sin restricciones en Sage 1000 v7.0.0 que permite a los usuarios autorizados cargar archivos sin la validación adecuada. Un atacante podría aprovechar esta vulnerabilidad cargando archivos maliciosos, como HTML, scripts u otro contenido ejecutable, que se pueden ejecutar en el servidor, lo que provocaría un mayor riesgo para el sistema.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.1
CWE CWE-434

30 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-30 18:15

Updated : 2025-06-27 19:52

NVD link : CVE-2024-48646

Mitre link : CVE-2024-48646

CVE.ORG link : CVE-2024-48646

JSON object : View

Products Affected

sage

  • sage_frp_1000
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type