CVE-2024-26261
Hgiga OAKlouds - Arbitrary File Read And Delete
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.8EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
15 feb 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being downloaded.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Hgiga · OAKlouds¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →