CVE-2024-55926
Arbitrary file upload, deletion and read through header manipulation
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Jan 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation. By exploiting improper validation of headers, attackers can gain unauthorized access to data
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Affected products
Xerox · Xerox Workplace SuiteWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →