CVE-2024-27120CWE-200

Local File Inclusion in ComfortKey before version 24.1.2

High · published August 14, 2024

CVSS v4.0
7.7
EPSS
1%
Percentile
45.3
In the wild
Unconfirmed
What it is

A Local File Inclusion vulnerability has been found in ComfortKey, a product of Celsius Benelux. Using this vulnerability, an unauthenticated attacker may retrieve sensitive information about the underlying system. The vulnerability has been remediated in version 24.1.2.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:M/U:Red
EPSS
0.00550 · 45.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-08-14T19:56Z
EPSS history
Timeline
  • 14 AUG 19:56Z
    Local File Inclusion in ComfortKey before version 24.1.2
    cvelistv5