Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-11145

Easy Folder Listing Pro deserialization vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Valor Apps Easy Folder Listing Pro

Default version status: unknown

  • 3.7 to < 3.8affected
  • 3.8unaffected
  • 4.4 to < 4.5affected
  • 4.5unaffected

References