Lucene search

A6d3dc9e-0591-4a13-bce7-0f5b31ff6158NVD:CVE-2024-26289

HistoryMay 27, 2024 - 7:15 a.m.

CVE-2024-26289

2024-05-2707:15:08

CWE-502

a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

web.nvd.nist.gov

nvd

cve-2024-26289

pmb

remote code inclusion

security vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18.

References

forge.sigb.net/projects/pmb/files

github.com/enisaeu/CNW/blob/main/advisories/2024/CNW-2024-A-12.md

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for NVD:CVE-2024-26289