CVE-2024-25461

HIGH

creatio crm_creatio Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2024-25461 has a selected CVSS score of 7.5 (high).

Description

Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 8, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 15, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

crm_creatio

Browse creatio / crm_creatio
VulnCheckVersion data not supplied

creatio_terrasoft_crm

Browse terrasoft / creatio_terrasoft_crm

Default status: unknown

CVE List7.18.4.1532affected

References

3