Edito CMS Leaks Sensitive Data in Versions 3.5-3.25
CVE-2024-4836

Currently unrated

Key Information:

Vendor: Edito CMS
Vendor: CVE Published:; 2 July 2024

What is CVE-2024-4836?

Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versions were never affected.

References

https://www.edito.pl/

https://cert.pl/en/posts/2024/07/CVE-2024-4836

https://cert.pl/posts/2024/07/CVE-2024-4836

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 2, 2024

CVE-2024-4836 Data

JSON