PT-2024-23521 · Unknown · Ametys Cms

Lucky-Lm · Published 2024-04-12 · Updated 2025-04-11 · CVE-2024-30614

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ametys CMS versions prior to 4.5.0

Description The issue allows attackers to obtain sensitive information via exposed resources to the error scope.

Recommendations For Ametys CMS versions prior to 4.5.0, update to a version later than 4.5.0 to resolve the issue.

Exploit

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2024-30614

Affected Products

Ametys Cms

References · 6

• 🔥 https://github.com/Lucky-lm/CVE-2024-30614/issues/1 · Exploit
• https://osv.dev/vulnerability/CVE-2024-30614 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30614 · Security Note
• https://twitter.com/CVEnew/status/1779016065160552794 · Twitter Post
• https://t.me/cvenotify/118872 · Telegram Post
• https://t.me/cvenotify/76521 · Telegram Post