CVE-2024-7458

CVE-2024-7458 affects elunez eladmin up to version 2.7. The vulnerability arises from path traversal via the file argument in the endpoints /api/deploy/upload and /api/database/upload within Database Management/Deployment Management. This can lead to accessing files outside the intended directory...

CVE-2024-7458 elunez eladmin Database Management/Deployment Management upload path traversal

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversa...

CVE-2024-7458 elunez eladmin Database Management/Deployment Management upload path traversal

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversa...

CVE-2024-7458

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversa...

CVE-2024-7458 elunez eladmin Database Management/Deployment Management upload path traversal

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversa...

ELADMIN security vulnerabilities

ELADMIN is a backend management system for elunez individual developers. A security vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from some unknown handling of files in the component database management/deployment management, where manipulation of parameter files can lead ...

PT-2024-38367 · Elunez · Elunez Eladmin

Name of the Vulnerable Software and Affected Versions: elunez eladmin versions up to 2.7 Description: A critical issue affects the Database Management/Deployment Management component, specifically the /api/deploy/upload and /api/database/upload API endpoints. The manipulation of the file argument...

CVE-2024-7458: Path Traversal: 'dir/../../filename'

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversa...

com.lwohvye:eladmin-api (>=3.0.3, <=3.1.0), com.lwohvye:eladmin-common (>=3.0.3, <=3.1.0) +29 more potentially affected by CVE-2022-23496 via nl.basjes.parse.useragent:yauaa (>=7.0.0, <=7.8.0)

nl.basjes.parse.useragent:yauaa MAVEN version =7.0.0, =3.0.3, =3.0.3, =3.0.3, =3.0.3, =3.0.3, =3.0.3, =7.0.0, =7.0.0, =7.8.0 and more Source cves: CVE-2022-23496 Source advisory: GHSA-C4PM-63CG-9J7H...