PatchTheCVECVE-2024-1750: A vulnerability, which was classified as critical, was found in TemmokuMVC up to 2.3
CVE-2024-1750 is a medium-severity flaw (CVSS 5.6) affecting temmokumvc. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability, which was classified as critical, was found in TemmokuMVC up to 2.3. Affected is the function get_img_url/img_replace in the library lib/images_get_down.php of the component Image Download Handler. The manipulation leads to deserialization. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be us
Why this priority
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.6 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.8% (top 44%) |
| CISA exploited list | No |
| Weakness | CWE-502 |
| Published | 2024-02-22 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-1750?
temmokumvc: upgrade to 2.3. Exact commands for each OS are on this page.
Is CVE-2024-1750 being exploited?
CVE-2024-1750 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-1750 affect?
CVE-2024-1750 affects temmokumvc. Severity is medium (CVSS 5.6). A vulnerability, which was classified as critical, was found in TemmokuMVC up to 2.3. Affected is the function get_img_url/img_replace in the library lib/images_get_down.php of the component Image Download Handler. The manipulation leads to
How urgent is CVE-2024-1750?
Priority 39/100. Remotely exploitable, no login, no user action