CVE-2024-44807

Oct. 15, 2024, 9:35 p.m.

5.3
Medium

Description

A directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and BurgerEditor Limited Edition before 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of the uploaded files.

Product(s) Impacted

Product Versions
baserCMS plugin
  • ['before 2.25.1']

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-552
Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.

References

http://basercms.com
http://burgereditor.com
https://burger.d-zero.co.jp/blogs/archives/2
https://jvn.jp/en/jp/JVN54676967/
https://jvn.jp/jp/JVN54676967/
https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000109.html

Tags

cve@mitre.org
CWE-552
2024-10-11
CVE-2024-44807

CVSS Score

5.3 / 10

CVSS Data - 3.1

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: NONE
  • Scope: UNCHANGED
  • Confidentiality Impact: LOW
  • Integrity Impact: NONE
  • Availability Impact: NONE

    • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

    View Vector String

Timeline

Published: Oct. 11, 2024, 6:15 p.m.
Last Modified: Oct. 15, 2024, 9:35 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.