CVE-2024-11145

CRITICAL

Valorapps Easy Folder Listing Pro < 4.5 - Insecure Deserialization

Title source: rule

Description

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.

References (2)

Scores

CVSS v3 9.8
EPSS 0.0353
EPSS Percentile 87.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-502
Status published

Affected Products (2)

valorapps/easy_folder_listing_pro < 4.5
valorapps/easy_folder_listing_pro

Timeline

Published Nov 26, 2024
Tracked Since Feb 18, 2026