CVE-2024-11215 in Web Serverالمعلومات

الملخص

بحسب MITRE • 14/11/2024

Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web server, affecting version 14.1. This vulnerability could allow remote users to bypass SecurityManager restrictions and retrieve any file stored on the server by setting only consecutive strings ‘/...%5c’.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

INCIBE

حجز

14/11/2024

إفشاء

14/11/2024

الاعتدال

تمت الموافقة

إدخال

VDB-284562

EPSS

0.00749

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!