CVE-2024-11215 — Path traversal vulnerability in EasyPHP

CVE-2024-11215

Path traversal vulnerability in EasyPHP PUBLISHED

Description (CNA)

Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web server, affecting version 14.1. This vulnerability could allow remote users to bypass SecurityManager restrictions and retrieve any file stored on the server by setting only consecutive strings ‘/...%5c’.

Affected (CNA)

Vendor / product	Versions
EasyPHP / EasyPHP web server	affected 14.1

CWE

CWE-22

References

https://www.incibe.es/en/incibe-cert/notices/aviso/path-traversal-vulnerability-easyphp

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.