CVE-2021-44351

HIGH

NavigateCMS 2.9 - Arbitrary File Read via navigate_download.php id Parameter

Title source: llm

An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download.php id parameter.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0177

EPSS Percentile 75.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-22

Status published

Products (1)

naviwebs/navigate_cms 2.9

Published Jan 06, 2022

Tracked Since Feb 18, 2026