CVE-2024-8875

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-8875
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8875.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-8875
Published
2024-09-15T21:31:03.787Z
Modified
2026-07-15T01:48:57.763131219Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
vedees wcms finder.php path traversal
Details

A vulnerability classified as critical was found in vedees wcms up to 0.3.2. Affected by this vulnerability is an unknown functionality of the file /wex/finder.php. The manipulation of the argument p leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific 
{
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8875.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.3.0"
                },
                {
                    "last_affected": "0.3.0"
                },
                {
                    "introduced": "0.3.1"
                },
                {
                    "last_affected": "0.3.1"
                },
                {
                    "introduced": "0.3.2"
                },
                {
                    "last_affected": "0.3.2"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-22"
    ]
}
References

Affected packages

Git / github.com/vedees/wcms

Affected ranges

Type
GIT
Repo
https://github.com/vedees/wcms
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ae9b65e011d8a1a92350db7830c11df3ea97a6f7
Database specific 
{
    "cpe": "cpe:2.3:a:wcms:wcms:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.3.2"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.6
0.0.6.1
0.0.7
0.0.8
0.0.9
0.1.0
0.1.1
0.1.2
0.1.2.1
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
0.2.2
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
0.3.0
0.3.1
1.*
1.1.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-8875.json"