PT-2026-27816 · Elated Themes · Gaspard
CVE-2026-22493
·
Publicado
2026-03-25
·
Atualizado
2026-03-30
CVSS v3.1
8.1
Alta
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Elated-Themes Gaspard versions n/a through 1.3
Description
A flaw exists in the handling of filenames for Include/Require statements within a PHP program, specifically a PHP Remote File Inclusion issue in Elated-Themes Gaspard. This allows for PHP Local File Inclusion. The vulnerable component is related to the processing of file names used in include or require operations.
Recommendations
Update Elated-Themes Gaspard to a version later than 1.3.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gaspard