The vulnerability CVE-2024-50480 affects azexo Marketing Automation by AZEXO, allowing an attacker with low privileges to upload files without proper restrictions on file types. This unrestricted file upload can be exploited to upload a web shell, potentially leading to full system compromise. The affected versions include all releases up to and including 1.27.80. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to upload a web shell to the web server, which can result in full system compromise including unauthorized access, data theft, data modification, and service disruption. The vulnerability impacts confidentiality, integrity, and availability at a critical level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious file uploads. Consider disabling file upload functionality if not essential. Follow vendor communications closely for updates on patches or official mitigations.