CVEvulnerability

CVE-2024-4836

7.5 HIGH Published 2024-07-02 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-07-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-552

Description

Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versions were never affected.

Related

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References