{"data":{"id":"b119f149-af4e-498b-9048-926feb3f4bfb","title":"CVE-2024-52384: Unrestricted Upload of File with Dangerous Type vulnerability in Sage AI Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles…","summary":"CVE-2024-52384 is an Unrestricted Upload of File with Dangerous Type vulnerability (CWE-434) in Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation, affecting versions from n/a through 2.4.9. The flaw allows an attacker to upload a web shell to a web server. Patchstack reported the issue, and NVD had not yet provided an assessment when published on 11/14/2024.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-52384","publishedAt":"2024-11-14T23:15:25.913Z","cveId":"CVE-2024-52384","cweIds":["CWE-434"],"cvssScore":"9.9","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Sage AI: Chatbots","OpenAI GPT-4 Bulk Articles","Dalle-3 Image Generation"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Sage AI WordPress plugin unrestricted file upload allowing web shell upload","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00492,"epssCheckedAt":"2026-11-04T12:08:35.257Z","kevDateAdded":null,"advisoryAliases":["GHSA-5vxp-rmvc-cvwj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:08.878Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-1"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}