CVE-2024-6878criticalCWE-552

CVE-2024-6878: critical vulnerability in Eliz Software Panel

Directory Browsing in Eliz Software's Panel

Published · Updated

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.2epss 0.4%
exploitation probability
0.4%top 67% of all CVEs
observed exploitation
nono source reports it
Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations. This issue affects Panel: before v2.3.24.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Affected products
Eliz Software · Panel
Related CVEs — Eliz Software Panel

In the same product, most dangerous first.

CVE-2024-5958CRITICALSQLi in Eliz Software's PanelEPSS 0.5%CVE-2024-5960CRITICALPlaintext Storage of a Password in Eliz Software's PanelEPSS 0.4%CVE-2024-6877CRITICALReflected XSS in Eliz Software's PanelEPSS 0.3%CVE-2024-5959CRITICALStored XSS in Eliz Software's PanelEPSS 0.3%
References
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1497https://www.usom.gov.tr/bildirim/tr-24-1497