Lucene search

[email protected]NVD:CVE-2024-37454

HistoryJul 09, 2024 - 11:15 a.m.

CVE-2024-37454

2024-07-0911:15:14

CWE-22

[email protected]

web.nvd.nist.gov

path traversal

awsm team

vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.7%

JSON

Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in AWSM Innovations AWSM Team allows Path Traversal.This issue affects AWSM Team: from n/a through 1.3.1.

Affected configurations

Nvd

Node

awsmawsm_teamRange<1.3.2wordpress

VendorProductVersionCPE
awsmawsm_team*cpe:2.3:a:awsm:awsm_team:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
awsm	awsm_team	*	cpe:2.3:a:awsm:awsm_team::::::wordpress::*

References

patchstack.com/database/vulnerability/awsm-team/wordpress-awsm-team-team-showcase-plugin-plugin-1-3-1-local-file-inclusion-vulnerability?_s_id=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.7%

JSON

Related for NVD:CVE-2024-37454

vulnrichment1 cve1 cvelist1 wordfence1