← All advisories

Low severity2.7NVD Advisory· Published Jul 16, 2024· Updated Jun 17, 2026

CVE-2024-40455

CVE-2024-40455

Description

An arbitrary file deletion vulnerability in ThinkSAAS v3.7 allows attackers to delete arbitrary files via a crafted request.

Affected products

3

Thinksaas/ThinkSAAS3 versions
cpe:2.3:a:thinksaas:thinksaas:3.70:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:thinksaas:thinksaas:3.70:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <3.7

Patches

Vulnerability mechanics

References

1

gold-textbook-8ff.notion.site/ThinkSAAS-Arbitrary-folder-deletion-vulnerability-f992ed6124bc46ccaa8c2982274b17e2nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.