Security Advisory

CVE-2024-2725

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-22 13:35:12
Last updated 2024-08-01 19:25:40
Assigner INCIBE
State PUBLISHED

Description

Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application.