CVE-2024-0191: RRJ Nueva Ecija Engineer Online Portal file information disclosure

Published Jan 2, 2024

Updated

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/uploads/. The manipulation leads to file and directory information exposure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249504.

Affected Software

1 affected component

NIA RRJ Nueva Ecija Engineer Online Portal=1.0

Event History

Jan 2, 2024

CVE Published

07:31 PM

Data Sourced

07:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-0191?

CVE-2024-0191 has been classified as problematic, indicating a significant risk to affected users.

What software is affected by CVE-2024-0191?

CVE-2024-0191 affects the RRJ Nueva Ecija Engineer Online Portal version 1.0.

What type of vulnerability is CVE-2024-0191?

CVE-2024-0191 is a vulnerability that leads to file and directory information exposure.

How can an attacker exploit CVE-2024-0191?

An attacker can remotely exploit CVE-2024-0191 through manipulation of the function in the file /admin/uploads/.

How do I fix CVE-2024-0191?

To fix CVE-2024-0191, it is recommended to secure the /admin/uploads/ directory and apply any available software updates.