PT-2024-29686
CVE-2024-42007
·
Published
2024-07-26
·
Updated
2024-08-01
Description by
CVSS 3.1
5.8
MediumMetricsAC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N
Name of the Vulnerable Software and Affected Versions
SPX (aka php-spx) versions 0.4.15 and earlier
Description
The issue allows for SPX UI URI Directory Traversal, enabling the reading of arbitrary files.
Recommendations
For SPX (aka php-spx) versions 0.4.15 and earlier, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾