CVE-2024-6648 — Path Traversal in AP Page Builder

CVE-2024-6648

Path Traversal in AP Page Builder PUBLISHED

Description (CNA)

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system.

Affected (CNA)

Vendor / product	Versions
Apollo Theme / AP Page Builder	affected 0 before 4.0.0

CWE

CWE-22

References

https://www.incibe.es/en/incibe-cert/notices/aviso/path-traversal-ap-page-builder

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.