CVE-2024-8374 | Ultimaker Cura up to 5.7.2 3MF Format Reader ThreeMFReader.py drop_to_buildplate code injection

A vulnerability was found in Ultimaker Cura up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /plugins/ThreeMFReader.py of the component 3MF Format Reader. The manipulation of the argument drop_to_buildplate leads to code injection.

The identification of this vulnerability is CVE-2024-8374. The attack may be initiated remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.