← Vulnerability feed

Vulnerability record · CVE-2024-25153 · published 13 March 2024

CVE-2024-25153: Fortra filecatalyst workflow exposure of resource to wrong sphere vulnerability

Fortra · Filecatalyst Workflow

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.

9.8 CVSS 3.1 Critical EPSS 42% · top 1.4% CWE-472 · CWE-472CWE-668 · Exposure of resource to wrong sphere
9.8CVSS 3.1 base score
42%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
5References
17 Jun 2026Last modified by NVD

Description

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://filecatalyst.software/public/filecatalyst/Workflow/5.1.6.114/fcweb_releasenotes.html Release Notes
https://www.fortra.com/security/advisory/fi-2024-002 Vendor Advisory
https://filecatalyst.software/public/filecatalyst/Workflow/5.1.6.114/fcweb_releasenotes.html Release Notes
https://www.fortra.com/security/advisory/fi-2024-002 Vendor Advisory
https://github.com/nettitude/CVE-2024-25153/blob/master/CVE-2024-25153.py

Track CVE-2024-25153 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-6633Fortra filecatalyst workflow information exposure vulnerabilityThe default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of the…EPSS 1.2%9.1CVE-2024-5276Fortra FileCatalyst Workflow SQL injection allows data modificationFortra FileCatalyst Workflow contains a SQL injection flaw (CWE-89, improper input validation) that lets an attacker modify application data, includi…EPSS 90%analysed7.2CVE-2024-6632Fortra filecatalyst workflow sql injection vulnerabilityA vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which ca…EPSS 0.61%6.9CVE-2025-35939Craft CMS unauthenticated session file write enables PHP code injectionCraft CMS stores unsanitized client-supplied return URL values in server-side session files for unauthenticated users. Because the session file path …KEVEPSS 1.3%analysed

Source: NIST National Vulnerability Database (record CVE-2024-25153), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.