CVE Catalog
CVE-2024-44807
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.47%
38th percentile - higher than 38% of all known CVEs
Summary
A directory listing vulnerability in the baserCMS plugin for BurgerEditor and BurgerEditor Limited Edition before version 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of uploaded files.
Risk Assessment
The organization risks exposure of confidential data stored in uploaded files, potentially leading to privacy breaches or further attacks.
Recommendation
Immediately update the BurgerEditor plugin to version 2.25.1 or later, which fixes this vulnerability.
Original NVD description (English source)
A directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and BurgerEditor Limited Edition before 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of the uploaded files.