CVE-2024-58279 is an authenticated remote code execution vulnerability in appRain CMF 4.0.5 caused by unrestricted upload of files with dangerous types (CWE-434). Administrative users can upload malicious PHP files through the filemanager upload endpoint, which are stored in the uploads directory and can be executed as web shells, allowing command execution on the server. The vulnerability has a CVSS 4.0 base score of 8.6, indicating high severity, with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker with administrative privileges to execute arbitrary code on the affected server by uploading and executing malicious PHP files. This can lead to full compromise of the web server, data theft, or further lateral movement. The vulnerability does not require user interaction but does require authenticated administrative access. There are no known public exploits currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted users only and monitor file uploads closely. Consider implementing additional file upload restrictions or web application firewall rules to block PHP file uploads if feasible.