Lucene search

VulDBCVE-2024-6949

HistoryJul 21, 2024 - 10:15 a.m.

CVE-2024-6949

2024-07-2110:15:04

CWE-22

VulDB

web.nvd.nist.gov

vulnerability

gargaj wuhu

remote path traversal

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS4

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

21.0%

JSON

A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?edit=News. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-272071.

Affected configurations

Nvd

Node

gargajwuhuRange≤2024-02-10

VendorProductVersionCPE
gargajwuhu*cpe:2.3:a:gargaj:wuhu:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gargaj	wuhu	*	cpe:2.3:a:gargaj:wuhu::::::::

CNA Affected

[
  {
    "vendor": "Gargaj",
    "product": "wuhu",
    "versions": [
      {
        "version": "3faad49bfcc3895e9ff76a591d05c8941273d120",
        "status": "affected"
      }
    ]
  }
]

References

github.com/DeepMountains/Mirage/blob/main/CVE4-2.md

vuldb.com/?ctiid.272071

vuldb.com/?id.272071

vuldb.com/?submit.375146

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS4

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

21.0%

JSON

Related for CVE-2024-6949