CVE-2024-32161 identifies a file upload vulnerability in jizhiCMS 2.5. The vulnerability allows remote attackers to upload files without authentication, potentially leading to full system compromise. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or remediation details are currently available.

Successful exploitation could allow attackers to execute arbitrary code, modify or delete data, and disrupt service availability due to unrestricted file uploads. The vulnerability affects system security at all levels, posing a critical risk to affected installations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict file upload functionality, implement strict file type validation, and monitor for suspicious activity related to file uploads.