CVE-2024-39150

vditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.

Score

CVSS 3.1 5.9 Medium

Status

Analyzed - cve@mitre.org

Published

2024-07-05

Last modified

2024-11-13

Affected products

• Vditor (B3log)

References

• https://b3log.org/vditor/