CVE-2024-7658
Medium
Description
A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720 is able to address this issue. The patch is named eb5a04774927e5855b9d0e5870a2aae5a3dc5a08. It is recommended to upgrade the affected component.
SeverityMedium
CVSS5.3
Exploit probability—
ProductProjectsend
PublishedAug 12, 2024
First seenAug 12, 2024
Weakness typeCWE-99CWE-99
How to fix
Update
- projectsend projectsendr1720 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| projectsend projectsend | v < r1720 | r1720 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.