CVE-2024-2599: Amss++ Project Amss++

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially obtain RCE through webshell, compromising the entire infrastructure.

Affected products

• Amss++ Project Amss++: version 4.31 only

Published 2024-03-18. Last modified 2026-06-17.