Vulnerabilitycritical
Malicious Actors Exploit ProjectSend Critical Vulnerability
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-11680 | Unauthenticated Config Tampering and Webshell Upload in ProjectSend (pre-r1720) | 9.8 | 92% | KEVPoC | KEV |
From the original article
1 min read at infosecurity-magazine.com
Public-facing instances of ProjectSend, an open-source file-sharing web application, have been exploited by attackers, according to vulnerability intelligence provider VulnCheck. ProjectSend was created by software developer Ignacio Nelson and is maintained by a group of over 50 people. It has received support from 1500 people on GitHub.
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.