Information Disclosure Vulnerability in Tsinghua Unigroup Electronic Archives Management System
CVE-2024-13042

5.3MEDIUM

Key Information:

Vendor: Tsinghua Unigroup
Status: Electronic Archives Management System
Vendor: CVE Published:; 30 December 2024

🔔 Create Tsinghua Unigroup Vulnerability Alert

What is CVE-2024-13042?

A vulnerability exists in Tsinghua Unigroup's Electronic Archives Management System that compromises the download functionality of the SubjectController.class.php file. This flaw allows attackers to manipulate the path argument, which can lead to unauthorized information disclosure. The nature of this vulnerability permits remote exploitation, thus making it critical for users to take precautionary measures. With the exploit details publicly disclosed, systems running version 3.2.210802(62532) are particularly at risk. Immediate attention to mitigating this vulnerability is essential to safeguard sensitive information from potential exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch