Path Traversal Vulnerability Affects Tutor LMS

CVE-2024-37266

What is CVE-2024-37266?

The vulnerability in Tutor LMS by Themeum arises from an improper limitation of a pathname to a restricted directory, known as a Path Traversal flaw. This security issue significantly compromises the integrity of the application by allowing attackers to manipulate file paths, potentially gaining access to sensitive files stored on the server. Affected versions, including Tutor LMS up to 2.7.1, may lead to unauthorized data exposure, making it crucial for users to apply the necessary patches and updates to safeguard their systems.

References