Critical Flaws in Mitel MiCollab: Path Traversal and SQL Injection Risks Unveiled

Critical security vulnerabilities CVE-2024-41713, CVE-2024-55550, and CVE-2024-35286 have been uncovered in Mitel MiCollab, exposing organizations to significant risks. These flaws could allow attackers to bypass authentication and access files on affected servers, potentially revealing sensitive data and compromising system security. Exploiting these vulnerabilities could lead to unauthorized access, endangering the confidentiality, integrity, and availability of impacted systems. Furthermore, CVE-2024-41713 and CVE-2024-35286 can be chained together for more advanced attacks, enabling threat actors to compromise systems, steal sensitive information, and disrupt enterprise operations.