Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-25502 EUVD-2024-22830GHSA-pg36-pgm7-px54

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information …

Published Feb 15, 2024 · Updated Aug 28, 2024 · Assigned by mitre

Description

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component.

References