CVE-2024-31394: Path Traversal
Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with an editor or higher privilege who can log in to the product may obtain arbitrary files on the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31394?
The severity of CVE-2024-31394 is classified as high due to the potential for unauthorized file access.
How do I fix CVE-2024-31394?
To fix CVE-2024-31394, upgrade to a-blog CMS version 3.1.12 or later, or 3.0.32 or later, or 2.11.61 or later, or 2.10.53 or later.
What versions of a-blog CMS are affected by CVE-2024-31394?
CVE-2024-31394 affects a-blog CMS versions prior to 3.1.12, 3.0.32, 2.11.61, 2.10.53, and all versions of 2.9 and earlier.
What kind of vulnerability is CVE-2024-31394?
CVE-2024-31394 is a directory traversal vulnerability that allows attackers to access files outside of the intended directories.
Can CVE-2024-31394 be exploited remotely?
Yes, CVE-2024-31394 can be exploited remotely by attackers who can send crafted requests to the a-blog CMS application.