medium5.3
CVE-2024-3707
Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto).
Impact
Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to enumerate all files in the web tree by accessing a php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opengnsys | Opengnsys | Version 1.1.1d |
Weakness classification
References
- NVD record
- CVE.org record
- https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys
- https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys