high7.5
CVE-2024-54453
An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15.
Impact
An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. A path traversal vulnerability in the DocServlet servlet allows remote attackers to retrieve any file from the Kurmi web application installation folder, e.g., files such as the obfuscated and/or compiled Kurmi source code.
Affected products
| Product | Affected versions |
|---|---|
| Kurmi Provisioning Suite | before 7.9.0.35 |
| 7.10.X | through 7.10.0.18 |
| And 7.11.X | through 7.11.0.15. |
Versions were read from the advisory text. No structured product data has been published for this record yet.