CVE-2024-7323: Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with…

PriorityP342medium6.5CVSS 3.1

AVNACLPRLUINSUCHINAN

EPSS

0.60%

44.2th percentile

Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files from the remote server .

Affected

4 ranges

Vendor	Product	Version range	Fixed in
digiwin	easyflow_net	< 6.6.17	6.6.17
digiwin	easyflow_net	—	—
digiwin	easyflow_net	—	—
digiwin	easyflow_net	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.