Unrestricted Upload of File with Dangerous Type Vulnerability Affects Tumult Hype Animations
CVE-2024-2890

9.1CRITICAL

Key Information:

Vendor

Tumult Inc.

Status
Tumult Hype Animations
Vendor
CVE Published:
28 March 2024

What is CVE-2024-2890?

A vulnerability exists in Tumult Hype Animations that permits the unrestricted upload of files with potentially dangerous types. This issue exposes web applications to the risk of malicious file uploads, leading to various security threats such as unauthorized code execution, data leakage, and system compromise. The vulnerability impacts multiple versions of Tumult Hype Animations, specifically noted from unnamed versions through 1.9.12. It is critical for users to implement security measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Tumult Hype Animations <= 1.9.12

References

https://patchstack.com/database/vulnerability/tumult-hype...
vdb-entry

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peng Zhou (Patchstack Alliance)
JSON
.