Количество 3
Количество 3
CVE-2024-48766
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.
GHSA-h96f-qxw6-vq8x
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.
BDU:2025-02475
Уязвимость сценария security.php сетевой инфраструктуры оповещения вторжений NetAlert X, позволяющая нарушителю читать произвольные файлы
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-48766 NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php. | CVSS3: 8.6 | 70% Средний | больше 1 года назад |
| GHSA-h96f-qxw6-vq8x NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php. | CVSS3: 8.6 | 70% Средний | больше 1 года назад |
 | BDU:2025-02475 Уязвимость сценария security.php сетевой инфраструктуры оповещения вторжений NetAlert X, позволяющая нарушителю читать произвольные файлы | CVSS3: 7.3 | 70% Средний | почти 2 года назад |
Уязвимостей на страницу