CVE-2024-8410

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-8410

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8410.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-8410

Published

2024-09-04T15:00:05Z

Modified

2026-08-27T03:59:22Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

ABCD ABCD2 otros_sitios.php path traversal

Details

A vulnerability classified as problematic was found in ABCD ABCD2 up to 2.2.0-beta-1. This vulnerability affects unknown code of the file /abcd/opac/php/otros_sitios.php. The manipulation of the argument sitio leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8410.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "2.2.0-beta-1"
                },
                {
                    "last_affected": "2.2.0-beta-1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/ABCD-DEVCOM/ABCD

Affected ranges

Type

GIT

Repo

https://github.com/ABCD-DEVCOM/ABCD

Events

Introduced

689cc1998cab4e6318012d511c2a49801e06a632

Last Affected

689cc1998cab4e6318012d511c2a49801e06a632

Database specific

Show details

{
    "cpe": "cpe:2.3:a:abcd-community:abcd:2.2.0:alpha:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.2.0-alpha"
        },
        {
            "last_affected": "2.2.0-alpha"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*

2.2.0-alpha

v2.*

v2.2.0-alpha

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8410.json"