CVE-2024-42007

Medium

SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.

mitre·CWE-22·Published 2024-07-26

CVSS

5.8

EPSS

0.01

KEV

Exploits

cve.orgen

95 chars

SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.

NVDen

95 chars

SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.

NVDes

118 chars

SPX (también conocido como php-spx) hasta 0.4.15 permite que SPX_UI_URI Directory Traversal lea archivos arbitrarios.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.8	—	—	CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N
3.1	Primary	cve.org	5.8	—	—	CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N