The vulnerability CVE-2024-51789 affects UjW0L Image Classify versions up to 1.0.0 and allows an attacker to upload files without proper restrictions on file types. This unrestricted file upload can be exploited to upload a web shell, potentially allowing remote code execution and full control over the affected web server. The CVSS 3.1 base score is 10, reflecting network attack vector, no required privileges or user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can result in an attacker gaining remote code execution on the web server hosting UjW0L Image Classify. This leads to full compromise of the system, including unauthorized access to sensitive data, modification or deletion of data, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the upload functionality, implement strict file type validation, and monitor for suspicious uploads as temporary mitigations.