PT-2024-17285
CVE-2024-11838
·
تاريخ النشر
2024-12-13
·
تاريخ التحديث
2024-12-13
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PlexTrac versions 1.61.3 through 2.8.1
Description
The issue affects PlexTrac due to an external control of file name or path vulnerability, allowing local code inclusion through the use of an undocumented API endpoint.
Recommendations
For versions 1.61.3 through 2.8.1, update to version 2.8.1 or later to resolve the issue.
As a temporary workaround, consider restricting access to the undocumented API endpoint until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾