Skip to content
OpenAdvisories

Archive

18 September 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.7
    CVE-2024-46987 Public exploit EPSS 15%

    Arbitrary path traversal in Camaleon CMS

    Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CM…