Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS0zN2dtLWg1d3ItcGYyNc4ABAWF

Path traversal in redaxo

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal.

Permalink: https://github.com/advisories/GHSA-37gm-h5wr-pf25
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zN2dtLWg1d3ItcGYyNc4ABAWF
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 1 day ago
Updated: about 5 hours ago

CVSS Score: 4.9
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Identifiers: GHSA-37gm-h5wr-pf25, CVE-2024-46212
References:

Repository: https://github.com/Purposex7/Vulns4Study
Blast Radius: 4.9

Affected Packages

packagist:redaxo/source

Dependent packages: 4
Dependent repositories: 10
Downloads: 14,557 total
Affected Version Ranges: <= 5.17.1
No known fixed version
All affected versions: 5.10.0, 5.10.1, 5.11.0, 5.11.1, 5.11.2, 5.12.0, 5.12.1, 5.13.0, 5.13.1, 5.13.2, 5.13.3, 5.14.0, 5.14.1, 5.14.2, 5.14.3, 5.15.0, 5.15.1, 5.16.0, 5.16.1, 5.17.0, 5.17.1