CVE-2024-39171

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-39171
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39171.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-39171
Published
2024-07-09T17:15:48Z
Modified
2025-01-14T12:16:03.462814Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix.

References

Affected packages

Git / github.com/phpvibe/phpvibe

Affected ranges

Type
GIT
Repo
https://github.com/phpvibe/phpvibe
Events

Affected versions

11.*

11.0.3
11.0.4
11.0.42
11.0.43
11.0.45
11.0.46