VYPR
← All advisories
Medium severity6.5OSV Advisory· Published Dec 26, 2025· Updated Jun 17, 2026

CVE-2024-42718

CVE-2024-42718

Description

A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit-file' parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
croogo/croogoPackagist
<= 4.0.7—

Affected products

3
  • Croogo/CroogoOSV2 versions
    2.3.3, 3.0.0, 3.0.1, …+ 1 more
    • (no CPE)range: 2.3.3, 3.0.0, 3.0.1, …
    • cpe:2.3:a:croogo:croogo:4.0.7:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:composer/croogo/croogo
    Range: <= 4.0.7

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.