CVE-2024-11145 | THREATINT

Description

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.

Reserved 2024-11-12 | Published 2024-11-26 | Updated 2024-11-26 | Assigner cisa-cg

CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CRITICAL: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Product status

Default status

unknown

3.7 before 3.8

affected

3.8

unaffected

4.4 before 4.5

affected

4.5

unaffected

References

www.valorapps.com/web-products/easy-folder-listing-pro.html (url)

github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2024/va-24-331-01.json (url)

cve.org (CVE-2024-11145)

nvd.nist.gov (CVE-2024-11145)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.