CVE-2024-44807

Description

A directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and BurgerEditor Limited Edition before 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of the uploaded files.

Reserved 2024-08-21 | Published 2024-10-11 | Updated 2024-10-15 | Assigner mitre

References

basercms.com

burgereditor.com

burger.d-zero.co.jp/blogs/archives/2

jvn.jp/en/jp/JVN54676967/

jvn.jp/jp/JVN54676967/

jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000109.html

cve.org (CVE-2024-44807)

nvd.nist.gov (CVE-2024-44807)

Download JSON