CVE-2024-3707CWE-548

Exposure of Information Through Directory Listing vulnerability in OpenGnsys

Medium · published April 12, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to enumerate all files in the web tree by accessing a php file.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-548 · Exposure of Information Through Directory Listing
Published
2024-04-12T13:52Z
EPSS history
Timeline
  • 12 APR 13:52Z
    Exposure of Information Through Directory Listing vulnerability in OpenGnsys
    cvelistv5