Read the docs

Edito

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Edito records in CISA KEV

No Edito vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-04500 CVE-2024-4836 · GHSA-w2w9-635q-99v6

LFI in sites managed by Edito CMS

Priority MEDIUM 44

Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02629 Published 2024-07-02 No fix listed CWE-552
Open these records in search →