GHSA-g5p6-3j82-xfm4 (CVE-2024-42718)

Details

A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter.

Affected Packages

croogo/croogo

Packagist

References

ADVISORYhttps://github.com/advisories/GHSA-g5p6-3j82-xfm4 PACKAGEhttps://github.com/croogo/croogo WEBhttps://github.com/jacopo1223/jacopo.github/tree/main/CVE-2024-42718 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-42718

GHSA-g5p6-3j82-xfm4

Details

Affected Packages

References

Aliases

CVSS Analysis

Related

Ecosystems

Timeline