Lucene search
+L

4 matches found

NVD
NVD
added 2025/05/08 1:15 p.m.43 views

CVE-2024-6648

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'productitempath' within the 'config' JSON file, allowing them to read any file on the system...

8.7CVSS0.00656EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/08 12:16 p.m.113 views

CVE-2024-6648

AP Page Builder (ApolloTheme) is a PrestaShop plugin affected by an absolute path traversal vulnerability in versions prior to 4.0.0 . An unauthenticated remote attacker can modify the product_item_path field within the plugin's config JSON file, enabling arbitrary file read on the underlying sys...

8.7CVSS6.6AI score0.00656EPSS
SaveIn wildExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/08 12:16 p.m.17 views

CVE-2024-6648 Path Traversal in AP Page Builder

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'productitempath' within the 'config' JSON file, allowing them to read any file on the system...

8.7CVSS6.6AI score0.00656EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/05/08 12:16 p.m.45 views

CVE-2024-6648 Path Traversal in AP Page Builder

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'productitempath' within the 'config' JSON file, allowing them to read any file on the system...

8.7CVSS0.00656EPSS
SaveExploits1References1
Rows per page
Query Builder