PT-2024-27833

CVE-2024-37928

·

Published

2024-07-12

·

Updated

2024-07-12

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions NooTheme Jobmonster versions through 4.7.0
Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This allows for file manipulation.
Recommendations For versions through 4.7.0, update to a version that contains a fix for this issue to prevent file manipulation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2024-37928
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com