CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2024-11-13

Last modified

2024-11-25

Affected products

• Thinfinity Workspace (Cybelesoft)

References

• https://blog.cybelesoft.com/thinfinity-workspace-security-bulletin-nov-2024/