CVE-2024-27765: Path Traversal
Published Mar 5, 2024
·Updated
Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController component.
Affected Software
2 affected components
Jeewms JeeWMS<3.7
Jeewms JeeWMS<=3.7
Event History
Mar 5, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-27765?
CVE-2024-27765 has a medium severity rating due to its potential to expose sensitive information.
2
How do I fix CVE-2024-27765?
To mitigate CVE-2024-27765, upgrade Jeewms to version 3.8 or later where the vulnerability has been addressed.
3
What systems are affected by CVE-2024-27765?
CVE-2024-27765 affects all versions of Jeewms up to and including version 3.7.
4
What kind of exploitation does CVE-2024-27765 allow?
CVE-2024-27765 allows remote attackers to use directory traversal techniques to access sensitive files on the server.
5
Is there a known exploit for CVE-2024-27765?
There are reports and incidents documenting the exploitation of CVE-2024-27765 by attackers targeting vulnerable instances.