Description
A Local File Inclusion vulnerability has been found in ComfortKey, a product of Celsius Benelux. Using this vulnerability, an unauthenticated attacker may retrieve sensitive information about the underlying system. The vulnerability has been remediated in version 24.1.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Celsius Benelux | ComfortKey | before 24.1.2 | — |
References
- https://csirt.divd.nl/CVE-2024-27120 third-party-advisory
- https://csirt.divd.nl/DIVD-2024-00031/ third-party-advisory