MoveTo Vulnerable to Missing Authorization

CVE-2024-25911

What is CVE-2024-25911?

A missing authorization vulnerability found in the Skymoon Labs MoveTo plugin can allow attackers to exploit this weakness and perform unauthorized file deletions. The issue affects all versions from n/a up to 6.2, creating potential security risks for users. Without proper authorization checks, the integrity of the affected systems may be compromised, underscoring the importance of timely updates and security measures.

References