Home > Vulnerability Database > CVE-2024-28698

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-28698

Good to know:

Date: July 21, 2024

Directory Traversal vulnerability in Marimer LLC CSLA .Net before 8.0 allows a remote attacker to execute arbitrary code via a crafted script to the MobileFormatter component.

Language: C#

Severity Score

8.6

Related Resources (10)

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-28698

Url: https://github.com/MarimerLLC/csla

Url: https://github.com/MarimerLLC/csla/commit/f3a5c3474974f60ce3c8ffbd5d91c23a1e397ea4

Url: https://github.com/MarimerLLC/csla/releases/tag/v5.5.4

Url: https://www.intruder.io/research/path-traversal-and-code-execution-in-csla-net-cve-2024-28698

Url: https://github.com/MarimerLLC/csla/commit/445bc609bc117f62cabf49e1462f7a43b0f8f9a2

Url: https://github.com/MarimerLLC/csla/commit/2c32a5748a0a4bb0159285dfad61d4050e890080

Url: https://github.com/MarimerLLC/csla/pull/3552

Url: https://github.com/MarimerLLC/csla/commit/8fbdd8c773bfeb9ba3e52d91b5a664848629b13a

Url: https://www.mend.io/vulnerability-database/CVE-2024-28698

Severity Score

8.6

Weakness Type (CWE)

Path Traversal

CWE-22

Top Fix

Upgrade Version

Upgrade to version Csla - 8.0.0

CVSS v3.1

Base Score:	8.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	HIGH
Availability (A):	LOW

Do you need more information?

Contact Us