CVE-2024-9983

Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ragic:enterprise_cloud_database:*:*:*:*:*:*:*:*

History

16 Oct 2024, 22:03

Type Values Removed Values Added
References () https://www.twcert.org.tw/en/cp-139-8149-31424-2.html - () https://www.twcert.org.tw/en/cp-139-8149-31424-2.html - Third Party Advisory
References () https://www.twcert.org.tw/tw/cp-132-8148-ed790-1.html - () https://www.twcert.org.tw/tw/cp-132-8148-ed790-1.html - Third Party Advisory
CWE CWE-22
First Time Ragic enterprise Cloud Database
Ragic
CPE cpe:2.3:a:ragic:enterprise_cloud_database:*:*:*:*:*:*:*:*

15 Oct 2024, 12:57

Type Values Removed Values Added
Summary
  • (es) Enterprise Cloud Database de Ragic no valida correctamente un parámetro de página específico, lo que permite que atacantes remotos no autenticados aprovechen esta vulnerabilidad para leer archivos de sistema arbitrarios.

15 Oct 2024, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-15 09:15

Updated : 2024-10-16 22:03


NVD link : CVE-2024-9983

Mitre link : CVE-2024-9983

CVE.ORG link : CVE-2024-9983


JSON object : View

Products Affected

ragic

  • enterprise_cloud_database
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-23

Relative Path Traversal