CVE-2024-48093: Operately

High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days.

Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types.

Affected products

• Operately Operately: from 0.1.0

Published 2024-10-30. Last modified 2026-06-17.