CVE-2024-5735: Full Path Disclosure in AdmirorFrames Joomla! Extension
Published Jun 28, 2024
·Updated
Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.
Affected Software
1 affected component
admiror-design-studio Admirorframes Joomla\!<5.0
Event History
Jun 28, 2024
CVE Published
via MITRE·11:24 AM
Data Sourced
via MITRE·11:24 AM
DescriptionWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Apr 19, 58462
Event
via NVD·04:23 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-5735?
CVE-2024-5735 has been classified with a medium severity due to its ability to disclose sensitive information.
2
How do I fix CVE-2024-5735?
To fix CVE-2024-5735, you should upgrade the AdmirorFrames Joomla! extension to version 5.0 or higher.
3
What systems are affected by CVE-2024-5735?
CVE-2024-5735 affects versions of the AdmirorFrames Joomla! extension prior to 5.0.
4
What can an attacker achieve with CVE-2024-5735?
An attacker exploiting CVE-2024-5735 can retrieve the location of the web root folder, potentially leading to further exploitation.
5
Is CVE-2024-5735 being actively exploited?
As of now, there are no confirmed reports of active exploitation for CVE-2024-5735.