CVE-2024-7729CWE-552

CAYIN Technology CMS - Sensitive File Download

High · published August 14, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00616 · 48.9th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2024-08-14T03:52Z
EPSS history
Timeline
  • 14 AUG 03:52Z
    CAYIN Technology CMS - Sensitive File Download
    cvelistv5