CVE-2024-10120

CVE-2024-10120 is a critical unrestricted file upload vulnerability affecting wfh45678 Radar up to version 1.0.8, specifically within the /services/v1/common/upload endpoint. This flaw allows remote attackers to upload arbitrary files, potentially leading to full compromise of the affected system. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network without authentication or user interaction, resulting in high impact to confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation in the wild, nor are there readily available Metasploit or Nuclei modules, and community discussion remains minimal.