high7.5
CVE-2024-42718
Croogo CMS has a path traversal vulnerability
Impact
A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | croogo/croogo | <= 4.0.7 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Croogo | Croogo | Version 4.0.7 |