CVE-2024-52004

MediaCMS is an open source video and media CMS, written in Python/Django and React, featuring a REST API. MediaCMS has been prone to vulnerabilities that upon special cases can lead to remote code execution. All versions before v4.1.0 are susceptible, and users are highly recommended to upgrade. The vulnerabilities are related with insufficient input validation while uploading media content. The condition to exploit the vulnerability is that the portal allows users to upload content. This issue has been patched in version 4.1.0. There are no known workarounds for this vulnerability.

• CWE-74

• https://github.com/mediacms-io/mediacms/blob/main/docs/admins_docs.md
• https://github.com/mediacms-io/mediacms/security/advisories/GHSA-x3p4-4442-q2c3

Published

Nov 8, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-51999Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-5200The Postie WordPress plugin before 1.9.71 does not sanitise …4.8
• CVE-2024-52000Combodo iTop is a simple, web based IT Service Management to…6.1
• CVE-2024-52001Combodo iTop is a simple, web based IT Service Management to…4.3
• CVE-2024-52002Combodo iTop is a simple, web based IT Service Management to…8.8
• CVE-2024-52003Traefik (pronounced traffic) is an HTTP reverse proxy and lo…6.1
• CVE-2024-52005Git is a source code management tool. When cloning from a se…8.8
• CVE-2024-52006Git is a fast, scalable, distributed revision control system…7.5
• CVE-2024-52007HAPI FHIR is a complete implementation of the HL7 FHIR stand…8.6
• CVE-2024-52008Fides is an open-source privacy engineering platform. The us…8.8
• CVE-2024-52009Atlantis is a self-hosted golang application that listens fo…9.8
• CVE-2024-5201Privilege Escalation in OpenText Dimensions RM allows an aut…8.8