CVE-2024-34315

Name of the Vulnerable Software and Affected Versions CmsEasy version 7.7.7.9

Description A local file inclusion issue was discovered, allowing attackers to read arbitrary files via the file get contents function in the fckedit action method of /admin/template admin.php.

Recommendations For CmsEasy version 7.7.7.9, consider disabling the fckedit action method in /admin/template admin.php until a patch is available to prevent exploitation of this issue. Restrict access to the /admin/template admin.php file to minimize the risk of arbitrary file reading.