CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September
CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September
24 August 2024
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has placed a security flaw impacting Versa Director to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation.
The medium-severity vulnerability, tracked as CVE-2024-39717 (CVSS score: 6.6), is case of file upload bug impacting the "Change Favicon" feature that could allow a threat actor to