Lucene search

CVE-2024-28335

🗓️ 27 Mar 2024 06:19:15Reported by [email protected]Type

Lektor 3.3.11 Path Traversal and Command Execution

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2024-28335	27 Mar 202400:00	–	cvelist
Vulnrichment	CVE-2024-28335	27 Mar 202400:00	–	vulnrichment
CVE	CVE-2024-28335	27 Mar 202406:15	–	cve
UbuntuCve	CVE-2024-28335	27 Mar 202400:00	–	ubuntucve
OSV	Lektor does not sanitize database path traversal	27 Mar 202406:30	–	osv
OSV	PYSEC-2024-49	27 Mar 202406:15	–	osv
Veracode	Path Traversal	1 Apr 202405:38	–	veracode
Github Security Blog	Lektor does not sanitize database path traversal	27 Mar 202406:30	–	github

Source	Link
getlektor	www.getlektor.com/docs/quickstart
brave	www.brave.com/privacy-updates/27-localhost-permission/
packetstormsecurity	www.packetstormsecurity.com/files/177708/Lektor-Static-CMS-3.3.10-Arbitrary-File-Upload-Remote-Code-Execution.html
cxsecurity	www.cxsecurity.com/issue/WLB-2024030043
github	www.github.com/lektor/lektor/pull/1179/commits/8f38b9713d152622b69ff5e3b1e6a0d7bb7fa800
github	www.github.com/lektor/lektor/releases/tag/v3.3.11

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Mar 2024 06:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS39.1

EPSS0.000

CWE-22