The vulnerability CVE-2024-52374 in DoThatTask Do That Task allows unauthenticated attackers to upload files of dangerous types without restriction, including web shells, to the web server. This can lead to complete compromise of the affected system. It affects all versions up to and including 1.5.5. The CVSS 3.1 base score is 10.0, indicating a network attack vector with no required privileges or user interaction, and results in complete confidentiality, integrity, and availability loss. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation allows an attacker to upload arbitrary files, including web shells, enabling remote code execution and full control over the affected server. This results in total compromise of confidentiality, integrity, and availability of the system running Do That Task versions up to 1.5.5.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the upload functionality, implement strict file type validation, and monitor for suspicious uploads. Consider disabling the upload feature if not required.