The vulnerability CVE-2024-52373 affects Devexhub Gallery up to version 2.0.1 and involves unrestricted file upload functionality that does not properly restrict dangerous file types. This allows attackers to upload web shells, which can be executed on the server, resulting in complete compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 10.0, reflecting network attack vector, no privileges required, no user interaction, and scope change with high impact on confidentiality, integrity, and availability. No known exploits in the wild or vendor patches have been reported as of the published date.

Successful exploitation allows an unauthenticated attacker to upload and execute arbitrary code on the affected server, leading to full system compromise including data theft, modification, or destruction, and potential disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the upload functionality, implement strict file type validation, and monitor for suspicious uploads as interim mitigations.