Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-33274

April 30, 2024, 5:52 p.m.

Tags

Product(s) Impacted

FME Modules customfields

  • 2.2.7
  • before 2.2.7

FME Modules customfields

  • 2.2.7 and before

Description

Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote attacker to obtain sensitive information via the Custom Checkout Fields, Add Custom Fields to Checkout parameter of the ajax.php

Weaknesses

Date

Published: April 30, 2024, 3:15 p.m.

Last Modified: April 30, 2024, 5:52 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References