CVE-2024-34523

CVSS 7.5 HIGHEPSS 0.8%CWE-22

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

07 may 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Path Traversal. This occurs through readfile in PHP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

Referencias

https://github.com/inclusive-design/AChecker/blob/main/checker/download.php https://github.com/piuppi/Proof-of-Concepts/blob/main/AChecker/CVE-2024-34523.md