CVE-2024-48359

Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-10-31

Last modified

2025-06-12

Weaknesses

CWE-94

Affected products

• Qualitor (Qualitor)

References

• https://github.com/OpenXP-Research/CVE-2024-48359
• https://www.qualitor.com.br/official-security-advisory-cve-2024-48359