CVE-2024-2635 Information

Description

The configuration pages available are not intended to be placed on an Internet facing web server as they expose file paths to the client who can be an attacker. Instead of rewriting these pages to avoid this vulnerability they will be dismissed from future releases of Cegid Meta4 HR as they do not offer product functionality

Reference

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-meta4-hr-cegid