Security Advisory

CVE-2024-35162

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-22 05:30:33

Last updated 2024-08-12 15:53:54

Assigner jpcert

State PUBLISHED

Description

Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6. If this vulnerability is exploited, a remote authenticated attacker with "switch_themes" privilege may obtain arbitrary files on the server.

← Browse all CVEs View on cve.org ↗