Vulnerability in Sugarsync
CVE-2024-4461
Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.
EPSS: 0.002 (6.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Sugarsync — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-4461?
- CVE-2024-4461 is a high-severity vulnerability in Sugarsync, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2024-05-03.
- How severe is CVE-2024-4461?
- High severity. CVSS v3 base score is 7.8 out of 10.