Threats affecting pkg:github/sec-kode/cmseasy

5 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.7%	CVE-2024-34315CmsEasy · Path Traversal High7.5EPSS 0.7%2024-05-07CVE Database V5CVE-2024-34315 CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the fckedit_action method of /admin/template_admin.php. This vulnerability allows attackers to read arbitrary files. EPSS 0.7%Vulnerability CWE-22	CVE Database V5	2024-05-07
Low	3.5	EPSS 0.4%	CVE-2024-32236cmseasy · Insecure Storage of Sensitive Information Low3.5EPSS 0.4%2024-04-25CVE Database V5CVE-2024-32236 An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component. EPSS 0.4%Vulnerability CWE-922	CVE Database V5	2024-04-25
Medium	6.4	EPSS 0.3%	CVE-2024-32163CMSeasy · Path Traversal Medium6.4EPSS 0.3%2024-04-17CVE Database V5CVE-2024-32163 CMSeasy 7.7.7.9 is vulnerable to code execution. EPSS 0.3%Vulnerability CWE-22	CVE Database V5	2024-04-17
Medium	4.3	EPSS 0.4%	CVE-2024-32162CMSeasy · Incomplete Filtering of Special Elements Medium4.3EPSS 0.4%2024-04-17CVE Database V5CVE-2024-32162 CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. EPSS 0.4%Vulnerability CWE-791	CVE Database V5	2024-04-17
Medium	4.9	EPSS 0.6%	CVE-2024-25828 · cmseasy V7.7.7.9 has an arbitrary file deletion Medium4.9EPSS 0.6%2024-02-22CVE Database V5 cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php. EPSS 0.6%Vulnerability CWE-27	CVE Database V5	2024-02-22

Page 1 of 1