ApostropheCMS Arbitrary File Read via Path Traversal in Import-Export (CVE-2024-6367)

github.com 2026-08-18查看中文 →

Security AdvisoryCVE-2024-6367MediumApostrophe CMS

Affected:

apostrophecms/import-export <= 3.6.1

Fixed in:

>= 3.6.2

Referenced CVEs: CVE-2026-63667 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

RocketChat Omnichannel HTML Escaping Fix (XSS) 2026-08-21 CSRF Vulnerability in Dynamic Input Field Generator with PoC 2026-08-21 PHP Improper Input Validation: Array-to-String Coercion Bypass in submit.php (CWE-20) 2026-08-21 Python urllib HTTP Auth Bypass: Patch and POC for Scheme Matching Vulnerability 2026-08-21 Genian NAC/ZTNA Unauthenticated Admin Credential Disclosure Vulnerability 2026-08-21

Offline Archive

Offline screenshot & PDF are Pro-exclusive