What is CVE-2024-12014?

CVE-2024-12014 is a vulnerability in Lleidanet Pki Esigna, classified under Improper Input Validation. Published 2024-12-20.

Is CVE-2024-12014 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Lleidanet Pki Esigna

CVE-2024-12014

Path Traversal vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (27.4th percentile) — read the EPSS interpretation.

Affected products

Lleidanet Pki Esigna — versions 1.3.2, 1.4.4, 4.0.4

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cve-coordination@incibe.es

Frequently asked questions

What is CVE-2024-12014?: CVE-2024-12014 is a vulnerability in Lleidanet Pki Esigna, classified under Improper Input Validation. Published 2024-12-20.
Is CVE-2024-12014 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.