CVE-2024-9983 — Ragic Enterprise Cloud Database - Arbitrary File Read through Path Traversal

CVE-2024-9983

Ragic Enterprise Cloud Database - Arbitrary File Read through Path Traversal PUBLISHED

Description (CNA)

Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

Affected (CNA)

Vendor / product	Versions
Ragic / Enterprise Cloud Database	affected 0 before 2024/08/08 09:45:25

CWE

CWE-23

References

https://www.twcert.org.tw/tw/cp-132-8148-ed790-1.html
https://www.twcert.org.tw/en/cp-139-8149-31424-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.