CVE-2024-25183
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
Risk Assessment
An attacker could access files outside the intended directory, potentially leading to sensitive information disclosure.
Recommendation
Update VvvebJs to a patched version and restrict access to scan.php.
Other vulnerabilities in VvvebJs
See all- CVE-2024-27480Critical
givanz VvvebJs 1.7.2 is vulnerable to insecure file upload, which may allow an attacker to upload malicious files to the server.
- CVE-2024-25182Critical
givanz VvvebJs 1.7.2 suffers from a file upload vulnerability via save.php, which may allow an attacker to upload dangerous files.
- CVE-2024-25181Critical
A critical vulnerability in givanz VvvebJs 1.7.2 allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. It stems from improper handling of user-supplied URLs in the "file_get_contents" function within the "save.php" file.
Original NVD description (English source)
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS