CVE-2024-2635CWE-698

Multiple vulnerabilities on Meta4 HR from Cegid

High · published March 19, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

The configuration pages available are not intended to be placed on an Internet facing web server, as they expose file paths to the client, who can be an attacker. Instead of rewriting these pages to avoid this vulnerability, they will be dismissed from future releases of Cegid Meta4 HR, as they do not offer product functionality

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00427 · 36.0th percentile
Weakness
CWE-698 · Execution After Redirect (EAR)
Published
2024-03-19T12:09Z
EPSS history
Timeline
  • 19 MAR 12:09Z
    Multiple vulnerabilities on Meta4 HR from Cegid
    cvelistv5