PatchTheCVECVE-2024-57968: Advantive VeraCore Unrestricted File Upload Vulnerability
CVE-2024-57968 is a critical-severity flaw (CVSS 9.9) affecting veracore, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this.
Why this priority
- Critical severity
- EPSS top 2%: very likely to be exploited
- Exploited in the wild (CISA KEV)
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.9 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 32.3% (top 2%) |
| CISA exploited list | Yes, fix due 2025-03-31 |
| Weakness | CWE-434 |
| Published | 2025-02-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Exploited Added to the CISA Known Exploited Vulnerabilities list
- Deadline CISA due date for US federal agencies to patch
- Updated Record last modified
Exact fixes by distribution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-57968?
veracore: upgrade to 2024.4.2.1. Exact commands for each OS are on this page.
Is CVE-2024-57968 being exploited?
Yes. CVE-2024-57968 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.
What does CVE-2024-57968 affect?
CVE-2024-57968 affects veracore. Severity is critical (CVSS 9.9). Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this.
How urgent is CVE-2024-57968?
Priority 89/100. Critical severity; EPSS top 2%: very likely to be exploited; Exploited in the wild (CISA KEV); Public exploit reference
Related CVEs
- CVE-2025-25181 MEDIUM 5.8 EXPLOITED UPGRADE Advantive VeraCore SQL Injection Vulnerability