Lucene search
+L

4 matches found

NVD
NVD
added 2025/05/08 1:15 p.m.40 views

CVE-2024-6648

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'productitempath' within the 'config' JSON file, allowing them to read any file on the system...

8.7CVSS0.00656EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/08 12:16 p.m.101 views

CVE-2024-6648

CVE-2024-6648 describes an Absolute Path Traversal in AP Page Builder (AP Page Builder plugin) for versions prior to 4.0.0. An unauthenticated remote attacker could modify the product_item_path in the config JSON, enabling reading arbitrary files on the system. Affected: AP Page Builder

8.7CVSS6.6AI score0.00656EPSS
SaveIn wildExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/08 12:16 p.m.16 views

CVE-2024-6648 Path Traversal in AP Page Builder

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'productitempath' within the 'config' JSON file, allowing them to read any file on the system...

8.7CVSS6.6AI score0.00656EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/05/08 12:16 p.m.38 views

CVE-2024-6648 Path Traversal in AP Page Builder

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'productitempath' within the 'config' JSON file, allowing them to read any file on the system...

8.7CVSS0.00656EPSS
SaveExploits1References1
Rows per page
Query Builder