CVE-2024-10200
Relative Path Traversal (CWE-23)
Published: Oct 21, 2024 / Updated: 30d ago
010
CVSS 7.5EPSS 0.09%High
CVE info copied to clipboard
Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
CVE Assignment
NVD published the first details for CVE-2024-10200
Oct 21, 2024 at 4:15 AM
First Article
Feedly found the first article mentioning CVE-2024-10200. See article
Oct 21, 2024 at 4:24 AM / National Vulnerability Database
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Oct 21, 2024 at 4:24 AM
EPSS
EPSS Score was set to: 0.09% (Percentile: 37.9%)
Oct 21, 2024 at 10:11 AM
Affected Systems
Wellchoose/administrative_management_system
+null more
Attack Patterns
CAPEC-139: Relative Path Traversal
+null more
News
Update Thu Oct 31 14:35:57 UTC 2024
Update Thu Oct 31 14:35:57 UTC 2024
CVE Alert: CVE-2024-10200
Everyone that supports the site helps enable new functionality. No affected endpoints listed.
High - CVE-2024-10200 - Administrative Management System from...
Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server.
CVE-2024-10200 | Wellchoose Administrative Management System path traversal
A vulnerability, which was classified as problematic , has been found in Wellchoose Administrative Management System . This issue affects some unknown processing. The manipulation leads to relative path traversal. The identification of this vulnerability is CVE-2024-10200 . The attack may be initiated remotely. There is no exploit available.
CVE-2024-10200
Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the...
See 4 more articles and social media posts