Lucene search

K
nvd[email protected]NVD:CVE-2024-39118
HistoryJul 09, 2024 - 5:15 p.m.

CVE-2024-39118

2024-07-0917:15:48
web.nvd.nist.gov
5
mommy heather backups arbitrary write

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0

Percentile

15.9%

Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up.

Affected configurations

Nvd
Node
mommyheatheradvanced_backupsRange<3.6
VendorProductVersionCPE
mommyheatheradvanced_backups*cpe:2.3:a:mommyheather:advanced_backups:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0

Percentile

15.9%

Related for NVD:CVE-2024-39118