CVE-2024-46987

CVE-2024-46987 - Camaleon CMS ローカルファイルインクルージョン Camaleon CMS 向け認証済みローカルファイルインクルージョン LFI エクスプロイト。 脆弱性 Camaleon CMS は、/admin/media/downloadprivatefile エンドポイントを介した認証済み LFI 攻撃に対して脆弱です。file パラメータが適切にサニタイズされておらず、パストラバーサルを許容し、サーバー上の任意のファイルを読み取ることができます。 影響を受けるバージョン Camaleon CMS 2.8.2 未満 必要条件 root@kitploit...

CVE-2026-1776: Improper Limitation of a Pathname to a Restricted Directory

Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users to read arbitrary files from the web server’s filesystem. The issue occurs in the downloadprivatefile functionality wh...

CVE-2024-46987

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987

CVE-2024-46987 affects Camaleon CMS (Ruby on Rails). A path traversal flaw exists in the MediaController download_private_file endpoint, where the file parameter is not properly sanitized, allowing an authenticated user to read arbitrary server files (information disclosure). Affected versions ar...

CVE-2024-46987 Arbitrary path traversal in Camaleon CMS

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...