CyberSecBulletin

LWS vulnerabilities

We track 2 vulnerabilities in LWS products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 1, 2024.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest LWS vulnerabilities

  • 8.8 High severity

    LWS Affiliation: Missing Authorization

    CVE-2024-43962LWS

    Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4.

  • 9.0 Critical severity

    LWS Affiliation: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2023-32297LWS

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LWS LWS Affiliation allows PHP Local File Inclusion.This issue affects LWS Affiliation: from n/a through 2.2.6.