CVE-2024-9922

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.

Score

CVSS 3.1 7.5 High

Status

Analyzed - twcert@cert.org.tw

Published

2024-10-14

Last modified

2024-10-15

Weaknesses

CWE-23

Affected products

• Team+ (Teamplus)
• Team+ Pro (Teamplus)
• Team (Teamplus Technology)

References

• https://www.twcert.org.tw/en/cp-139-8127-41699-2.html
• https://www.twcert.org.tw/tw/cp-132-8126-5d9d2-1.html