CVE-2024-58283 affects WBCE CMS version 1.6.2 and involves an unrestricted file upload vulnerability in the Elfinder file manager component. Authenticated users can upload malicious PHP files without proper validation, leading to remote code execution by executing arbitrary system commands through user-controlled parameters. This vulnerability is categorized under CWE-434 (Unrestricted Upload of File with Dangerous Type) and has a CVSS 4.0 base score of 8.7, indicating high severity. The vulnerability is not related to cloud services and no patch or official fix has been documented yet.

Successful exploitation allows authenticated attackers to upload web shells and execute arbitrary system commands on the affected server, potentially leading to full system compromise. This can result in unauthorized access, data theft, service disruption, or further network penetration. The vulnerability requires authentication but no user interaction and has a high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Elfinder file manager to trusted users only and consider disabling or limiting file upload functionality. Monitor for suspicious file uploads and remove any unauthorized PHP files. Implement additional file validation controls if possible.