CVE-2024-4836 PoC — Edito CMS 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4836.yaml

Associated Vulnerability

Title:Edito CMS 安全漏洞 (CVE-2024-4836)
Description:Edito CMS是Edito公司的一个全面的框架。可以改进网站和门户网站的管理。 Edito CMS 3.25版本至3.5版本存在安全漏洞，该漏洞源于允许未经身份验证的用户下载配置文件。

Description

Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthorized user.

File Snapshot


 id: CVE-2024-4836

info:
  name: Edito CMS - Sensitive Data Leak
  author: s4e-io
  severity: high
 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!