Path Traversal Vulnerability Affects Slideshow SE

CVE-2024-35778

Summary

A security vulnerability has been identified in John West Slideshow SE that allows for improper limitation of a pathname to a restricted directory, often referred to as a Path Traversal vulnerability. This flaw, related to Local File Inclusion, permits unauthorized access to sensitive files on the server. Affected products include all versions of Slideshow SE up to and including version 2.5.17, exposing them to potential exploitation. Users are encouraged to implement available security patches and monitor their systems for any unusual activity to mitigate risks.

References