The vulnerability CVE-2024-51790 in HB WEBSOL HB AUDIO GALLERY allows unauthenticated attackers to upload files of dangerous types without restriction. This includes the ability to upload web shells, which can be executed on the server, leading to full system compromise. The affected product versions are up to and including 3.0. The CVSS 3.1 base score is 10.0, reflecting network attack vector, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to upload and execute arbitrary code on the web server, resulting in full compromise of the affected system. This includes potential data theft, data modification, and denial of service. The vulnerability poses a critical risk to any deployment of the affected software versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the upload functionality, implement strict file type validation, and consider disabling file uploads if not necessary. Monitor for suspicious activity related to file uploads. Do not rely on generic mitigations unless specifically applicable to this vulnerability.