CVE-2024-44867: Path Traversal
Published Sep 10, 2024
·Updated
phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.
Affected Software
2 affected components
PhpOK PhpOK
PhpOK PhpOK=3.0
Event History
Sep 10, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-44867?
CVE-2024-44867 is classified as a high severity vulnerability due to its arbitrary file read capability.
2
How do I fix CVE-2024-44867?
To fix CVE-2024-44867, you should update phpok to the latest version that has patched this vulnerability.
3
What is the impact of exploiting CVE-2024-44867?
Exploiting CVE-2024-44867 can allow attackers to read arbitrary files on the server, potentially leading to data leakage.
4
Which versions of phpok are affected by CVE-2024-44867?
CVE-2024-44867 affects phpok version 3.0.
5
How can I verify if my system is vulnerable to CVE-2024-44867?
You can verify vulnerability to CVE-2024-44867 by checking for the existence of the /autoload/file.php component in your phpok installation.