Directory Listing Vulnerability in baserCMS Plugin by D-ZERO CO., LTD.
CVE-2024-44807

5.3MEDIUM

Key Information:

Vendor: D-ZERO CO., LTD.
Status: baserCMS Plugin
Vendor: CVE Published:; 11 October 2024

🔔 Create D-ZERO CO., LTD. Vulnerability Alert

What is CVE-2024-44807?

A vulnerability in the baserCMS plugin allows remote attackers to gain access to sensitive information through exposed directory listings. Specifically, the flaw permits unauthorized users to view a list of uploaded files, potentially leading to data breaches and privacy violations. It is crucial for users of BurgerEditor and BurgerEditor Limited Edition versions prior to 2.25.1 to apply necessary security measures and updates to mitigate this vulnerability.

References

https://burger.d-zero.co.jp/blogs/archives/2

https://jvn.jp/en/jp/JVN54676967/

https://jvn.jp/jp/JVN54676967/

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 11, 2024
Vulnerability Reserved
Aug 21, 2024

CVE-2024-44807 Data

JSON