CVE Catalog

CVE-2024-32162

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

32th percentile - higher than 32% of all known CVEs

Summary

CMSeasy version 7.7.7.9 is vulnerable to arbitrary file deletion. An attacker can exploit this vulnerability to delete critical system files.

Risk Assessment

The risk involves the potential deletion of configuration files, data, or application files, which could lead to system downtime or data loss.

Recommendation

It is recommended to immediately update CMSeasy to the latest available version that fixes this vulnerability. If an update is not possible, restrict access to the system and monitor logs for suspicious file deletion operations.

Original NVD description (English source)

CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS