Archive
18 September 2024
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 7.7
Arbitrary path traversal in Camaleon CMS
Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CM…