Code Execution Vulnerability in Lucee Servers by Lucee
CVE-2024-55354

8.8HIGH

Key Information:

Vendor

Lucee

Status
Lucee Server
Vendor
CVE Published:
8 April 2025

What is CVE-2024-55354?

Lucee Server versions prior to 5.4.7.3 LTS and 6.1.1.118 exhibit a critical security flaw that allows an attacker with file placement capabilities to bypass protective measures. This vulnerability enables the execution of unauthorized code and access to sensitive server resources that should remain secured. Administrators are urged to apply updates and reinforce security mechanisms to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Lucee Server 0 < 5.4.7.3 LTS

Lucee Server 6 < 6.1.1.118

References

https://dev.lucee.org/t/lucee-cve-2024-55354-security-adv...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.