PT-2024-36252 · Unknown · Vimeography

Fariq Fadillah Gusti Insani · CVE-2024-54366 · Published 2024-12-16 · Updated 2024-12-16

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Vimeography versions prior to 2.4.4 Vimeography version 2.4.4

Description: The issue is related to the generation of error messages that contain sensitive information, allowing the retrieval of embedded sensitive data.

Recommendations: For versions prior to 2.4.4, update to version 2.4.5 or later. For version 2.4.4, update to version 2.4.5 or later.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2024-54366

Affected Products

Vimeography

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-54366 · Security Note
• https://patchstack.com/database/wordpress/plugin/vimeography/vulnerability/wordpress-vimeography-plugin-2-4-4-full-path-disclosure-fpd-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/vimeography/vulnerability/wordpress-vimeography-plugin-2-4-4-full-path-disclosure-fpd-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1868666566935777570 · Twitter Post