{"id":"CVE-2024-25153","aliases":["EUVD-2024-22491","GHSA-4cvq-vvgx-cv87"],"status":"published","title":"Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114","description":"A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.41741,"percentile":0.98699,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-472","CWE-668"],"published":"2024-03-13T14:10:36Z","modified":"2026-06-17T07:15:36Z","exploits":[{"source":"pocgithub","id":"nettitude/CVE-2024-25153","title":"nettitude/CVE-2024-25153","date":"2024-03-12","url":"https://github.com/nettitude/CVE-2024-25153"},{"source":"pocgithub","id":"rainbowhatrkn/CVE-2024-25153","title":"rainbowhatrkn/CVE-2024-25153","date":"2024-03-18","url":"https://github.com/rainbowhatrkn/CVE-2024-25153"}],"products":[{"vendor":"fortra","product":"filecatalyst"},{"vendor":"fortra","product":"filecatalyst_workflow"}],"references":[{"url":"https://www.fortra.com/security/advisory/fi-2024-002","tags":["x_transferred","Vendor Advisory"]},{"url":"https://filecatalyst.software/public/filecatalyst/Workflow/5.1.6.114/fcweb_releasenotes.html","tags":["x_transferred","Release Notes"]},{"url":"https://github.com/nettitude/CVE-2024-25153/blob/master/CVE-2024-25153.py","tags":["exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25153"},{"url":"https://github.com/advisories/GHSA-4cvq-vvgx-cv87"}],"sources":{"cve":[{"id":"CVE-2024-25153","title":"Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114","description":"A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.","status":"published","published":"2024-03-13T14:10:36.029Z","modified":"2025-09-19T12:46:03.155Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-472"],"updated_at":"2026-11-02T14:34:04.341725Z"}],"euvd":[{"id":"EUVD-2024-22491","description":"A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.","status":"published","published":"2024-03-13T14:10:36Z","modified":"2025-09-19T12:46:03Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:31:41.781446Z"}],"ghsa":[{"id":"GHSA-4cvq-vvgx-cv87","title":"A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows...","description":"A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.","status":"published","published":"2024-03-13T15:31:05Z","modified":"2025-09-19T15:31:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-472","CWE-668"],"updated_at":"2026-11-02T15:03:40.313612Z"}],"nvd":[{"id":"CVE-2024-25153","description":"A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.","status":"published","published":"2024-03-13T15:15:50.913Z","modified":"2026-06-17T07:15:36.897Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-472","CWE-668"],"updated_at":"2026-11-02T14:09:40.831473Z"}]}}