CVE-2024-46212 - An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal

MEDIUM

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal

Published Oct 16, 2024

4.9

MEDIUM

CVSS 3.1

EPSS 0.87%

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
5.17.1	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-2913		Advisory
https://github.com/Purposex7/Vulns4Study/blob/main/REDAXO%20File%20Download%20Exploit.md		ExploitThird Party Advisory
https://github.com/advisories/GHSA-37gm-h5wr-pf25		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-46212