CyberSecBulletin

Gestioip vulnerabilities

We track 2 vulnerabilities in Gestioip products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 14, 2025.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Gestioip vulnerabilities

  • 8.8 High severity

    Gestioip: Cross-Site Request Forgery

    CVE-2024-50858GestioipEPSS 1.78%

    Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actions via the admin's browser by hosting a malicious URL, leading to data modification, deletion, or exfiltration.

  • 9.8 Critical severity

    Gestioip: Unrestricted Upload of File with Dangerous Type

    CVE-2024-48760GestioipEPSS 45.8%

    An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi file that overwrites the original upload.cgi file, enabling remote command execution.