CVE-2024-34191: Medium severity htmly vulnerability
Published May 14, 2024
·Updated
htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the deletepost() function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request.
Affected Software
2 affected components
Htmly Htmly
Htmly Htmly=2.9.6
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 14, 2024
CVE Published
via NVD·04:17 PM
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeaknessAffected Software
Aug 29, 2024
Data Sourced
via MITRE·06:50 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-34191?
CVE-2024-34191 is considered a high severity vulnerability due to its potential for arbitrary file deletion.
2
How do I fix CVE-2024-34191?
To fix CVE-2024-34191, update to the latest version of htmly that contains the patch for this vulnerability.
3
What does CVE-2024-34191 affect?
CVE-2024-34191 affects htmly version 2.9.6 and earlier versions.
4
What type of attack is possible with CVE-2024-34191?
CVE-2024-34191 allows attackers to perform arbitrary file deletion through the delete_post() function.
5
Is my system vulnerable to CVE-2024-34191?
If you are using htmly version 2.9.6 or earlier, your system is vulnerable to CVE-2024-34191.