Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17. An authorized user can upload executable files when inserting images in the rich text editor, and upload executable files when uploading files on the document management page. Those executables can be executed if they are not stored in a shared directory or if the storage directory has executed permissions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-11 | 1 | Disclosure1 |
| 2026-02-18 | 1 | General1 |
CVE-2024-50620 Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage components in CIPPlanner CIPAce before 9.17. An auth… https://www.cve.org/CVERecord?id=CVE-2024-50620
Post summary
CVE-2024-50620 details an unrestricted upload vulnerability in CIPPlanner CIPAce (pre‑9.17) affecting the rich text editor and document management components, allowing upload of dangerous file types.
[CVE-2024-50620: HIGH] Beware of unrestricted file upload vulnerabilities in CIPPlanner CIPAce (before 9.17) allowing execution of dangerous files. Exercise caution to prevent cyber threats. #CyberSecurity#cve,CVE-2024-50620,#cybersecurity https://cvefind.com/CVE-2024-50620
Post summary
The post warns about a high‑severity unrestricted file upload flaw in CIPPlanner CIPAce (pre‑9.17) that could allow execution of dangerous files, but does not provide a PoC, exploit code, active exploitation evidence, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cipplanner | cipace | - | - | - |