CVE-2024-35308

A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through <777.3.

Score

CVSS 3.1 8.8 High

Status

Analyzed - security@pandorafms.com

Published

2024-10-22

Last modified

2024-10-22

Weaknesses

CWE-22

Affected products

• Pandora Fms (Pandora Fms)
• Pandora Fms (Pandorafms)

References

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/