CVE-2024-8410

A vulnerability classified as problematic was found in ABCD ABCD2 up to 2.2.0-beta-1. This vulnerability affects unknown code of the file /abcd/opac/php/otros_sitios.php. The manipulation of the argument sitio leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://vuldb.com/?id.276490 Third Party Advisory VDB Entry
https://vuldb.com/?ctiid.276490 Permissions Required
https://vuldb.com/?submit.398806 Third Party Advisory VDB Entry
https://github.com/peritocibernetico/ABCD_Vulnerabilities Not Applicable
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:abcd-community:abcd:2.2.0:alpha:*:*:*:*:*:*
cpe:2.3:a:abcd-community:abcd:2.2.0:beta0:*:*:*:*:*:*

History

05 Sep 2024, 14:20

Type Values Removed Values Added
CPE cpe:2.3:a:abcd-community:abcd:2.2.0:alpha:*:*:*:*:*:*
cpe:2.3:a:abcd-community:abcd:2.2.0:beta0:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
References () https://github.com/peritocibernetico/ABCD_Vulnerabilities - () https://github.com/peritocibernetico/ABCD_Vulnerabilities - Not Applicable
References () https://vuldb.com/?submit.398806 - () https://vuldb.com/?submit.398806 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.276490 - () https://vuldb.com/?id.276490 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.276490 - () https://vuldb.com/?ctiid.276490 - Permissions Required
First Time Abcd-community abcd
Abcd-community

04 Sep 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-04 15:15

Updated : 2024-09-05 14:20


NVD link : CVE-2024-8410

Mitre link : CVE-2024-8410


JSON object : View

Products Affected

abcd-community

  • abcd
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')