PT-2023-15571 · Lmxcms · Lmxcms
CVE-2022-48094
·
Publicado
2023-02-01
·
Atualizado
2023-02-08
CVSS v3.1
4.9
Média
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
lmxcms version 1.41
Description
The issue is related to an arbitrary file read vulnerability. It affects the TemplateAction.class.php file, allowing unauthorized access to files.
Recommendations
For lmxcms version 1.41, consider restricting access to the TemplateAction.class.php file as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Files Accessible to External Parties
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Lmxcms