Lucene search
HistoryJun 28, 2024 - 12:15 p.m.
CVE-2024-5735
admirorframes
joomla
cve-2024-5735
full path disclosure
vulnerability
6.3 Medium
CVSS4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N/AU:Y/U:Green/R:U/V:D/RE:L
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.
CNA Affected
[
{
"collectionURL": "https://www.admiror-design-studio.com/admiror-joomla-extensions/admiror-frames",
"defaultStatus": "unaffected",
"platforms": [
"Joomla!"
],
"product": "AdmirorFrames",
"repo": "https://github.com/vasiljevski/admirorframes",
"vendor": "Nikola Vasilijevski",
"versions": [
{
"lessThan": "5.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
CVE-2024-5735 Full Path Disclosure in AdmirorFrames Joomla! Extension
2024-06-28 11:24:18
nvd
nvd
CVE-2024-5735
2024-06-28 12:15:10
6.3 Medium
CVSS4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N/AU:Y/U:Green/R:U/V:D/RE:L
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Related for CVE-2024-5735