CVE-2024-57337

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file.

Published 2025-05-28. Last modified 2026-06-17.