Lucene search

K

4 matches found

CVE
CVE
added 2024/08/13 9:15 p.m.76 views

CVE-2024-7742

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. It is possible to launch th...

9.8CVSS7.2AI score0.0009EPSS
CVE
CVE
added 2024/08/13 8:15 p.m.66 views

CVE-2024-7740

A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...

9.8CVSS7.2AI score0.0027EPSS
CVE
CVE
added 2024/08/13 9:15 p.m.66 views

CVE-2024-7743

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attack ...

9.8CVSS7.2AI score0.0009EPSS
CVE
CVE
added 2024/08/13 8:15 p.m.63 views

CVE-2024-7741

A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The manipulation of the argument file leads to path traversal. The attack may be initiated remotely. The ex...

6.9CVSS5.3AI score0.0032EPSS