CVE-2024-2635

The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future releases of Cegid Meta4 HR, as they do not offer product functionality
CVSS

No CVSS.

Configurations

No configuration.

History

19 Mar 2024, 13:26

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-19 12:15

Updated : 2024-03-19 13:26


NVD link : CVE-2024-2635

Mitre link : CVE-2024-2635


JSON object : View

Products Affected

No product.

CWE
CWE-698

Execution After Redirect (EAR)