CVE-2024-5587

MEDIUM

Casdoor < 1.335.0 - Unauthenticated Sensitive File Exposure via Configuration File Handler

Title source: llm
STIX 2.1

Description

A vulnerability was found in Casdoor up to 1.335.0. It has been classified as problematic. Affected is an unknown function of the file /conf/app.conf of the component Configuration File Handler. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-266838 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry
https://vuldb.com/?id.266838
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.266838
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.343357

Scores

CVSS v3 5.3
EPSS 0.0047
EPSS Percentile 36.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-552
Status published
Products (1)
n/a/Casdoor 1.335
Published Jun 02, 2024
Tracked Since Feb 18, 2026