CVE-2024-9405 Information
Oct 02, 2024
cve
Description
An incorrect limitation of a path to a restricted directory (path traversal) has been detected in Pluck CMS affecting version 4.7.18. An unauthenticated attacker could extract sensitive information from the server via the absolute path of a file located in the same directory or subdirectory as the module but not from recursive directories.