CVE-2024-4836

Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versions were never affected.
Configurations

No configuration.

History

02 Jul 2024, 12:09

Type Values Removed Values Added
Summary
  • (es) Los servicios web gestionados por Edito CMS (Sistema de gestión de contenidos) en las versiones 3.5 a 3.25 filtran datos confidenciales, ya que permiten descargar archivos de configuración por parte de un usuario no autenticado. El problema en las versiones 3.5 - 3.25 se eliminó en las versiones que datan del 10 de enero de 2014. Las versiones superiores nunca se vieron afectadas.

02 Jul 2024, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-02 09:15

Updated : 2024-07-02 12:09


NVD link : CVE-2024-4836

Mitre link : CVE-2024-4836

CVE.ORG link : CVE-2024-4836


JSON object : View

Products Affected

No product.

CWE
CWE-552

Files or Directories Accessible to External Parties