Vulnerability DatabaseCVE-2024-46987
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2024-46987
September 18, 2024
Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CMS is running on (depending on the file permissions). This issue may lead to Information Disclosure. This issue has been addressed in release version 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Packages
camaleon_cms (RUBY):
Affected version(s)
Fix Suggestion:
Update to version 2.8.1
Related Resources (9)
https://github.com/owen2345/camaleon-cms/commit/071b1b09d6d61ab02a5960b1ccafd9d9c2155a3e
https://owasp.org/www-community/attacks/Path_Traversal
https://securitylab.github.com/advisories/GHSL-2024-182_GHSL-2024-186_Camaleon_CMS
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2024-46987.yml
https://codeql.github.com/codeql-query-help/ruby/rb-path-injection
https://www.reddit.com/r/rails/comments/1exwtdm/camaleon_cms_281_has_been_released
https://github.com/owen2345/camaleon-cms
https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-cp65-5m9r-vc2c
https://nvd.nist.gov/vuln/detail/CVE-2024-46987
Do you need more information?
Contact Us
CVSS v4
Base Score:
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
NONE
Vulnerable System Availability
NONE
Subsequent System Confidentiality
HIGH
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Weakness Type (CWE)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22
Exposure of Sensitive Information to an Unauthorized Actor
CWE-200
EPSS
Base Score:
0.17