Unrestricted Upload of File with Dangerous Type Vulnerability Affects Tumult Hype Animations

CVE-2024-2890

Summary

A vulnerability exists in Tumult Hype Animations that permits the unrestricted upload of files with potentially dangerous types. This issue exposes web applications to the risk of malicious file uploads, leading to various security threats such as unauthorized code execution, data leakage, and system compromise. The vulnerability impacts multiple versions of Tumult Hype Animations, specifically noted from unnamed versions through 1.9.12. It is critical for users to implement security measures to mitigate the risks associated with this vulnerability.

References