CVE-2024-25298
CVE-2024-25298
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php.
CVSS 7.2 · High · EPSS 1.1%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
redaxo/source Packagist
- Versions
- 5.10.0
- 5.10.0-beta1
- 5.10.0-beta2
- 5.10.1
- 5.11.0
- 5.11.0-beta1
- 5.11.1
- 5.11.2
- 5.12.0
- 5.12.0-beta1
- 5.12.0-beta2
- 5.12.0-beta3
- 5.12.1
- 5.13.0
- 5.13.0-beta1
- 5.13.0-beta2
- 5.13.1
- 5.13.2
- 5.13.3
- 5.14.0
- 5.14.0-beta1
- 5.14.0-beta2
- 5.14.1
- 5.14.2
- 5.14.3
- 5.15.0
- 5.15.0-beta1
- 5.15.1
- Affected ranges
- ECOSYSTEM: ≤ 5.15.1
No fix published