CVE-2024-11215

Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web server, affecting version 14.1. This vulnerability could allow remote users to bypass SecurityManager restrictions and retrieve any file stored on the server by setting only consecutive strings ā€˜/...%5c’.
CVSS

No CVSS.

Configurations

No configuration.

History

14 Nov 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-14 14:15

Updated : 2024-11-15 13:58


NVD link : CVE-2024-11215

Mitre link : CVE-2024-11215


JSON object : View

Products Affected

No product.

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')