Description (CNA)
Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Valor Apps / Easy Folder Listing Pro | affected 3.7 before 3.8; unaffected 3.8; affected 4.4 before 4.5; unaffected 4.5 |
CWE
CWE-502
References
- https://www.valorapps.com/web-products/easy-folder-listing-pro.html
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2024/va-24-331-01.json
ADP enrichment
No English description supplied.
No references supplied.