Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-11145 EUVD-2024-33745GHSA-8cwc-g9gg-qp9w

Easy Folder Listing Pro deserialization vulnerability

Published Nov 26, 2024 · Updated Nov 26, 2024 · Assigned by cisa-cg

Description

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.

Affected products

VendorProductAffectedFixed
Valor Apps Easy Folder Listing Pro 3.7 – < 3.8, 4.4 – < 4.5 3.8

Advisories 1

References