CVE-2024-4836highCWE-552

CVE-2024-4836: fallo de gravedad alta en Edito CMS

LFI in sites managed by Edito CMS

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Edito CMS

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

36Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendcvss 7.5epss 2.6%
Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versions were never affected.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Edito · Edito CMS