CVE-2024-34314

Name of the Vulnerable Software and Affected Versions CmsEasy version 7.7.7.9

Description A local file inclusion issue was discovered, allowing attackers to read arbitrary files via the file get contents function in the fetch action method of "/admin/template admin.php".

Recommendations For CmsEasy version 7.7.7.9, consider disabling the fetch action method in "/admin/template admin.php" until a patch is available to prevent exploitation of this issue. Restrict access to the "/admin/template admin.php" file to minimize the risk of arbitrary file reading.