Lucene search
HistoryAug 01, 2024 - 9:15 p.m.
CVE-2024-38746
path traversal
server side request forgery
makestories.
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
EPSS
0
Percentile
11.0%
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in MakeStories Team MakeStories (for Google Web Stories) allows Path Traversal, Server Side Request Forgery.This issue affects MakeStories (for Google Web Stories): from n/a through 3.0.3.
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-38746
2024-08-01 21:15:27
wordfence
wordfence
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
EPSS
0
Percentile
11.0%
Related for NVD:CVE-2024-38746