CVE-2024-25153

—

CVSS 3.1

9.8 critical

EPSS

42%p99

Published

Mar 13, 2024 (Mar 13, 2024)

Modified

Jun 17, 2026

Description

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.

Vendors: fortra
Products: filecatalyst workflow
Weakness: CWE-472, CWE-668
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (41.7%)

In the news5 stories

PoC exploit for critical Fortra FileCatalyst flaw published (CVE-2024-5276)

Help Net SecurityJun 8, 10:33 UTC · Jun 8, 2026Exploit / PoC in the wildCVE-2024-5276 CVE-2023-0669 CVE-2024-25153

Week in review: Ivanti fixes RCE vulnerability, Nissan breach affects 100,000 individuals

Help Net SecurityMar 24, 00:00 UTC · Mar 24, 2024Vulnerability CVE-2023-41724 CVE-2024-25153 CVE-2024-27198

PoC exploit for critical Fortra FileCatalyst MFT vulnerability released (CVE-2024-25153)

Help Net SecurityMar 19, 00:00 UTC · Mar 19, 2024Exploit / PoC in the wildCVE-2024-25153 CVE-2024-0204 CVE-2023-0669

PoC exploit for critical RCE in Fortra FileCatalyst tool released

Security AffairsMar 18, 20:41 UTC · Mar 18, 2024Exploit / PoC CVE-2024-25153

Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

The Hacker NewsMar 18, 12:58 UTC · Mar 18, 2024Vulnerability CVE-2024-25153 CVE-2024-25154 CVE-2024-25155