Skip to content
OpenAdvisories

Vendor

owen2345

18 known vulnerabilities.

Products

Camaleon CMS 10 CamaleonCMS 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-66748 Public exploit

    Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field

    Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows users with custom_fields manage permission to execute arbitrary Ruby code by supplying a malicious expression through the select_eval custom fi…

    owen2345 Camaleon CMS
  • High 7.7
    CVE-2024-46987 Public exploit EPSS 15%

    Arbitrary path traversal in Camaleon CMS

    Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CM…

    owen2345 Camaleon CMS camaleon_cms RubyGems