CVE-2024-25153criticalCWE-472

CVE-2024-25153: critical vulnerability in Fortra FileCatalyst

Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

Published · Updated

Follow this CVE+ Monitor FileCatalyst

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

62Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 9.8epss 42%
from disclosure to weaponsame day
Published on NVDMar 13
1st PoCMar 12
In short

FileCatalyst Workflow allows attackers to upload files outside the intended folder through a specially crafted request, potentially enabling them to upload malicious web shells that execute arbitrary code on the server.

Technical detail

A directory traversal vulnerability in the 'ftpservlet' component accepts POST requests with path traversal sequences that bypass upload directory restrictions, allowing placement of JSP files in the web root where they are executed with application privileges, leading to remote code execution.

Summary generated and translated by AI from the official description.
A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Fortra · FileCatalyst
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Fortra FileCatalyst

In the same product, most dangerous first.

CVE-2024-25154MEDIUMPath Traversal in FileCatalyst Direct 3.8.8 and EarlierEPSS 0.5%CVE-2024-25155HIGHReflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlierEPSS 0.4%CVE-2025-8450HIGHUnrestricted File Upload in FileCatalystEPSS 0.3%