4 matches found
CVE-2024-4388
This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server...
CVE-2024-4388 CAS <= 1.0.0 - Unauthenticated Arbitrary File Access
This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server...
CVE-2024-4388 CAS <= 1.0.0 - Unauthenticated Arbitrary File Access
This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server...
CVE-2024-4388
The WordPress Theme CAS (versions <= 1.0.0 ) is vulnerable to an Unauthenticated Arbitrary File Access vulnerability. The root cause is a lack of validation on a path generated with user input when downloading files. This allows an unauthenticated attacker to download arbitrary files from the ...