Skip to content
OpenAdvisories

Package · RubyGems

camaleon_cms

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2024-46987 Public exploit EPSS 15%

    Arbitrary path traversal in Camaleon CMS

    Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CM…

    owen2345 Camaleon CMS camaleon_cms RubyGems