Lucene search
K

11 matches found

VulnCheck KEV
VulnCheck KEV
added 2025/11/29 12:0 a.m.1 views

VulnCheck KEV: CVE-2024-49380

Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the...

9.3CVSS5.9AI score0.7146EPSS
In wildExploits1References77
OSV
OSV
added 2024/10/31 9:49 p.m.10 views

GHSA-6H8W-HRFP-PFFX Plenti arbitrary file deletion vulnerability

Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixes the vulnerabili...

9.3CVSS7.3AI score0.00404EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2024/10/31 9:49 p.m.20 views

Plenti arbitrary file deletion vulnerability

Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixes the vulnerabili...

8.7CVSS6.7AI score0.00404EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2024/10/31 9:48 p.m.8 views

GHSA-2P96-P7QH-4RGR Plenti arbitrary file write vulnerability

Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the...

9.3CVSS9.5AI score0.7146EPSS
Exploits1References5
NVD
NVD
added 2024/10/25 2:15 p.m.14 views

CVE-2024-49380

Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the...

9.3CVSS0.7146EPSS
Exploits1References3
CVE
CVE
added 2024/10/25 1:6 p.m.78 views

CVE-2024-49381

CVE-2024-49381 – Plenti arbitrary file deletion : In Plenti, a static site generator, versions prior to 0.7.2 expose an arbitrary file write/deletion via the /postLocal endpoint when serving a site. This can lead to information loss. The issue is mitigated by upgrading to v0.7.2 or later, which c...

8.7CVSS7.3AI score0.00404EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/25 1:6 p.m.18 views

CVE-2024-49381 Plenti arbitrary file deletion vulnerability

Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixes the vulnerabili...

8.7CVSS6.2AI score0.00404EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/10/25 1:4 p.m.15 views

CVE-2024-49380 Plenti arbitrary file write vulnerability

Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the...

9.3CVSS7.5AI score0.7146EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/10/25 12:0 a.m.1 views

Plenti 注入漏洞

Plenti is a static site generator from Plentico open source. An injection vulnerability exists in versions of Plenti prior to 0.7.2, which stems from the fact that when a user runs their website, the /postLocal endpoint can be exploited for arbitrary file writes, potentially leading to remote cod...

9.3CVSS8.5AI score0.7146EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/10/25 12:0 a.m.2 views

Plenti 注入漏洞

Plenti is a static site generator from Plentico open source. An injection vulnerability exists in versions of Plenti prior to 0.7.2, which stems from the fact that when a user runs their site, the /postLocal endpoint can be exploited for arbitrary file deletion, potentially resulting in loss of...

8.7CVSS8AI score0.00404EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.2 views

PT-2024-33495 · Plenti +1 · Plenti +1

Name of the Vulnerable Software and Affected Versions: Plenti versions prior to 0.7.2 Description: The issue is related to an arbitrary file deletion vulnerability. The /postLocal endpoint is vulnerable to an arbitrary file write deletion when a Plenti user serves their website. This problem may...

9.9CVSS6.2AI score0.94047EPSS
Exploits20References136
Rows per page
Query Builder