CVE-2024-54452

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File Inclusion vulnerability in the logsSys.do page allows remote attackers authenticated as administrators to trigger the display of unintended files. Any file...

CVE-2024-54452

creationtimestamp| type| source ---|---|--- 2024-12-27 19:50:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113726524273820716 2024-12-27 20:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecskjhnkw2i 2024-12-27 21:52:47+00:00| seen|...

CVE-2024-54452

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35 and 7.10.x through 7.10.0.18. A Directory Traversal and Local File Inclusion vulnerability in the logsSys.do page allows remote attackers authenticated as administrators to trigger the display of unintended files. Any file...

CVE-2024-54452

The Kurmi Provisioning Suite contains a Directory Traversal and Local File Inclusion vulnerability in the logsSys.do page. This flaw affects versions before 7.9.0.35 and versions 7.10.x through 7.10.0.18 . An attacker authenticated as an administrator can exploit this to display unintended files,...