CVE-2024-8304

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-8304

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8304.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-8304

Published

2024-08-29T14:31:05.547Z

Modified

2026-07-15T01:48:54.553673567Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

jpress Template Module edit path traversal

Details

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8304.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-22"
    ]
}

References

Affected packages

Git / github.com/jpressprojects/jpress

Affected ranges

Type

GIT

Repo

https://github.com/jpressprojects/jpress

Events

Introduced

eaa01690a165c4469b3405c2c67894d12c8aba7d

Last affected

4048eea8a0ab139ee8e4bd019173a1e93d256744

Database specific

{
    "cpe": "cpe:2.3:a:jpress:jpress:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.0"
        },
        {
            "introduced": "5.1.1"
        },
        {
            "last_affected": "5.1.1"
        },
        {
            "introduced": "0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

5.*

5.1.0

5.1.1

v5.*

v5.1.0

v5.1.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8304.json"