Path Traversal Vulnerability in Elunez Eladmin Database Management
CVE-2024-7458
Key Information:
Badges
What is CVE-2024-7458?
A critical path traversal vulnerability has been identified in Elunez Eladmin, specifically affecting versions up to 2.7 within its Database Management and Deployment Management components. By manipulating the upload functionality of the API, an attacker may exploit this vulnerability to access arbitrary files on the server. The attack leverages a crafted file argument to traverse directories using patterns such as 'dir/../../filename', which could expose sensitive information or system files. Given the potential impact of this exploit, it is crucial for affected users to implement security measures, such as updating to the latest version of the software, to mitigate the risk of unauthorized access.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
eladmin 2.0
eladmin 2.1
eladmin 2.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved