CVE-2024-4836 json
LFI in sites managed by Edito CMS
published 2024-07-02 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-44418
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.6%
- EPSS 2.6% chance of exploitation in 30 days, percentile 85%
- public exploits
- 0
- none known, plus a Nuclei check
Summary
Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher versions were never affected.
Patch / fix
- Edito Edito CMS patch 10.01.2014
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
2.63% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Nuclei template Edito CMS - Sensitive Data Leak nuclei detection template
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
- Edito Edito CMS
- edito edito_cms
Classification
- Weakness
-
- CWE-552 Files or Directories Accessible to External Parties
References
-
edito.pl
/
product
-
cert.pl
/en/posts/2024/07/CVE-2024-4836
third-party-advisory
-
cert.pl
/posts/2024/07/CVE-2024-4836
third-party-advisory
Sources
- CVE List CVE-2024-4836
- NVD CVE-2024-4836
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.