What is CVE-2024-7458?

CVE-2024-7458 is a medium-severity vulnerability in Elunez Eladmin, classified under CWE-27. CVSS score: 5.5/10. Published 2024-08-04.

How severe is CVE-2024-7458?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Elunez Eladmin

CVE-2024-7458

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. Th…

EPSS: 0.005 (66.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Elunez Eladmin — versions 2.0, 2.1, 2.2

Weakness classification (CWE)

CWE-27

References

VDB-273551 | elunez eladmin Database Management/Deployment Management upload path traversal (vdb-entry, technical-description)
VDB-273551 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, permissions-required)
Submit #380498 | elunez eladmin <=v2.7 Path Traversal: 'dir/../../filename' (third-party-advisory)
github.com/elunez/eladmin/issues/851 (exploit, issue-tracking)

Frequently asked questions

What is CVE-2024-7458?: CVE-2024-7458 is a medium-severity vulnerability in Elunez Eladmin, classified under CWE-27. CVSS score: 5.5/10. Published 2024-08-04.
How severe is CVE-2024-7458?: Medium severity. CVSS v3 base score is 5.5 out of 10.