PT-2024-19700
CVE-2024-23182
·
تاريخ النشر
2024-01-23
·
تاريخ التحديث
2024-02-16
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
a-blog cms versions prior to 2.9.1
a-blog cms versions 2.9.0 and earlier
a-blog cms versions 2.10.x through 2.10.49
a-blog cms versions 2.11.x through 2.11.57
a-blog cms versions 3.0.x through 3.0.28
a-blog cms versions 3.1.x through 3.1.6
Description
The issue allows a remote authenticated attacker to delete arbitrary files on the server due to a relative path traversal vulnerability.
Recommendations
For versions 2.9.0 and earlier, update to version 2.9.1 or later.
For versions 2.10.x through 2.10.49, update to version 2.10.50 or later.
For versions 2.11.x through 2.11.57, update to version 2.11.58 or later.
For versions 3.0.x through 3.0.28, update to version 3.0.29 or later.
For versions 3.1.x through 3.1.6, update to version 3.1.7 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾