What is CVE-2024-8781?

CVE-2024-8781 is a vulnerability in Tr7 Application Security Platform (Asp), classified under CWE-250. Published 2024-11-18.

Is CVE-2024-8781 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Tr7 Application Security Platform (Asp)

CVE-2024-8781

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform (ASP) allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform (ASP): v1.4.25.188.

EPSS: 0.002 (9.2th percentile) — read the EPSS interpretation.

Affected products

Tr7 Application Security Platform (Asp) — versions v1.4.25.188

Weakness classification (CWE)

CWE-250
CWE-424

Public proof-of-concept exploits

ccelikanil/ccelikanil

References

iletisim@usom.gov.tr (government-resource, broken-link)
iletisim@usom.gov.tr (government-resource)

Frequently asked questions

What is CVE-2024-8781?: CVE-2024-8781 is a vulnerability in Tr7 Application Security Platform (Asp), classified under CWE-250. Published 2024-11-18.
Is CVE-2024-8781 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.