PT-2024-35223 · Unknown · Team Members

João Pedro S Alcântara · Published 2024-12-09 · Updated 2024-12-09 · CVE-2024-52385

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Team Member versions n/a through 7.3

Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows for potential remote file inclusion vulnerabilities in PHP programs. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For versions n/a through 7.3, update to a version that includes a fix for this issue, as no specific workaround or mitigation measures are provided in the input descriptions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2024-52385

Affected Products

Team Members

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-52385 · Security Note
• https://patchstack.com/database/wordpress/plugin/team-showcase-supreme/vulnerability/wordpress-team-member-multi-language-supported-team-plugin-7-1-limited-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1866124563173806375 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/team-showcase-supreme/vulnerability/wordpress-team-member-multi-language-supported-team-plugin-7-1-limited-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/12398 · Telegram Post
• https://t.me/cvenotify/103522 · Telegram Post