CVE Feed

    Dashboard / CVE / CVE-2024-11664

    CVE-2024-11664

    A vulnerability, which was classified as critical, has been found in eNMS up to 4.2. Affected by this issue is the function multiselect_filtering of the file eNMS/controller.py of the component TGZ File Handler. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 22b0b443acca740fc83b5544165c1f53eff3f529. It is recommended to apply a patch to fix this issue.

    Published:Nov 25, 2024
    Last Modified:Dec 4, 2024
    EPS:Nov 25, 2024
    EPSS Score:0.00941
    CVSS Score:8.8

    Affected Products

    Vendor
    Enms
    Product
    Enms

    Exploits

    https://github.com/eNMS-automation/eNMS/pull/419https://github.com/eNMS-automation/eNMS/pull/419#issuecomment-2495640750https://mega.nz/folder/ZhIiDQaI#TUJCRV-XN41L-WEVAu0sWghttps://www.youtube.com/watch?v=FJVFtNb4_qA

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High