Executive brief
Camaleon CMS affected by arbitrary file write to RCE (GHSL-2024-182)
Affected products
- RubyGems camaleon_cms
Junglewise Threat Intelligence
CVE-2024-46986: Camaleon CMS affected by arbitrary file write to RCE (GHSL-2024-182)
CVE-2024-46986 · Severity: low · CVSS 3.1 · Published 2024-09-18
Technologies: camaleon_cms (RubyGems). Vendors: RubyGems.
Related threats
- Camaleon CMS path traversal in AWS S3 uploader
- Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment
- camaleon_cms affected by cross site scripting
- Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)
- Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)