{"uuid": "8c60f0da-1afa-4101-ad5d-d401627404ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50623", "type": "exploited", "source": "https://t.me/thehackernews/6016", "content": "A critical vulnerability (CVE-2024-50623) in Cleo's file transfer software is under active, widespread exploitation\u2014affecting fully patched systems. \n \nThe flaw allows unauthenticated remote code execution through unrestricted file uploads, enabling attackers to execute arbitrary code. \n \nOver 4,200 organizations use Cleo software globally\u2014this is a major security concern for logistics, consumer products, and more. \n \nGet critical insights: https://thehackernews.com/2024/12/cleo-file-transfer-vulnerability-under.html", "creation_timestamp": "2024-12-10T17:04:30.000000Z"}