Camaleon CMS vulnerabilities

2 known vulnerabilities in Camaleon CMS from Tuzitio. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  camaleon-cms: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-46987Sep 18, 2024Owen2345EPSS 14.6%

  Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CMS

• 9.9 Critical severity

  camaleon-cms: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-46986Sep 18, 2024Owen2345EPSS 37.1%

  Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the we