high7.5
CVE-2024-2725
Information exposure vulnerability in the CIGESv2 system.
Impact
Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atisoluciones | Ciges | Version 2.0 |