5 matches found
CVE-2024-35526
An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in the /facade directory...
CVE-2024-35526
An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in the /facade directory...
CVE-2024-35527
The Daemon PTY Limited FarCry Core framework (a ColdFusion language web application framework) is vulnerable to an arbitrary file upload vulnerability in the /fileupload/upload.cfm endpoint in versions prior to 7.2.14 . An attacker can exploit this by uploading a crafted .cfm file to achieve arbi...
CVE-2024-35526
The FarCry Core framework (a ColdFusion language web application framework) by Daemon PTY Limited is vulnerable in versions prior to 7.2.14 . The root cause is the insecure storage of sensitive information , specifically allowing unauthorized access to the /facade directory. To resolve this issue...
