TI-2024-32454 Aliases CVE-2024-48647 GHSA-wrjh-x85j-vvg8

A file disclosure vulnerability exists in Sage 1000 v7.0.0.

LOW 35CWE-552Published 2024-10-30 · Updated 2024-10-31

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-552.

Summary

A file disclosure vulnerability exists in Sage 1000 v7.0.0. This vulnerability allows remote attackers to retrieve arbitrary files from the server's file system by manipulating the URL parameter in HTTP requests. The attacker can exploit this flaw to access sensitive information, including configuration files that may contain credentials and system settings, which could lead to further compromise of the server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00778 56th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:sage:sage_frp_1000:7.0.0:::::::*	7.0.0	Vulnerable	Sage

cpe:2.3:a:sage:sage_frp_1000:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Sage

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-48647
2026-10-03 Alias added: GHSA-wrjh-x85j-vvg8

References

Exploit 1

https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md

TI-2019-15193 A path traversal vulnerability exists in Sage FRP 1000 before November 2019. CVSS 3.1HIGH 7.5
TI-2024-32453 An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows… CVSS 3.1HIGH 8.1
TI-2024-32455 A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0. CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences