Lucene search
MitreCVE-2024-33118HistoryMay 06, 2024 - 8:15 p.m.
CVE-2024-33118
2024-05-0620:15:10
CWE-494
mitre
web.nvd.nist.gov
24
luckyframeweb
v3.5.2
arbitrary read vulnerability
filedownload method
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.3
Confidence
High
EPSS
0
Percentile
9.0%
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController.
Related
nvd
nvd
CVE-2024-33118
2024-05-06 20:15:10
vulnrichment
vulnrichment
CVE-2024-33118
2024-05-06 00:00:00
cvelist
cvelist
CVE-2024-33118
2024-05-06 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.3
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVE-2024-33118