CVE-2024-49381

Name of the Vulnerable Software and Affected Versions Plenti versions prior to 0.7.2

Description The issue is related to an arbitrary file deletion vulnerability. The /postLocal endpoint is vulnerable to an arbitrary file write deletion when a Plenti user serves their website. This problem may lead to information loss.

Recommendations For versions prior to 0.7.2, update to version 0.7.2 to fix the vulnerability. As a temporary workaround, consider restricting access to the /postLocal endpoint until the issue is resolved.