CVE-2024-37266 — Path Traversal in Tutor LMS

CWE-22 — Path Traversal3 documents3 sources
Severity
7.2HIGHNVD
CNA4.9
EPSS
1.0%
top 22.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Themeum Tutor LMS
Timeline
PublishedJul 9

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Tutor LMS allows Path Traversal.This issue affects Tutor LMS: from n/a through 2.7.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

▶NVDthemeum/tutor_lms< 2.7.2
▶CVEListV5themeum/tutor_lmsn/a — 2.7.1

🔴Vulnerability Details

2
GHSA
GHSA-3mr3-f7hf-395x: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Tutor LMS allows Path Traversal↗2024-07-09
▶
CVEList
WordPress Tutor LMS plugin <= 2.7.1 - Path Traversal vulnerability↗2024-07-09
▶
CVE-2024-37266 — Path Traversal in Themeum Tutor LMS | cvebase