CVE-2024-3369

CVE-2024-3369 is a critical unrestricted file upload vulnerability found in code-projects Car Rental 1.0, specifically within the add-vehicle.php file when handling the "Upload Image" argument. This flaw allows an authenticated attacker to remotely upload arbitrary files, potentially leading to full compromise of the affected system. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low privileges and no user interaction, resulting in high impacts to confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, nor are there readily available exploits in common frameworks like Metasploit or Nuclei, and it has garnered minimal community discussion or media coverage.