Medium severity5.3NVD Advisory· Published Oct 11, 2024· Updated Apr 15, 2026

CVE-2024-44807

Description

A directory listing issue in the baserCMS plugin in D-ZERO CO., LTD. BurgerEditor and BurgerEditor Limited Edition before 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of the uploaded files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Basercms/Basercmsinferred
Range: <2.25.1
D-ZERO CO., LTD./BurgerEditorllm-create
Range: <2.25.1
D-ZERO CO., LTD./BurgerEditor Limited Editionllm-create
Range: <2.25.1

Patches

Vulnerability mechanics

References

basercms.comnvd
burgereditor.comnvd
burger.d-zero.co.jp/blogs/archives/2nvd
jvn.jp/en/jp/JVN54676967/nvd
jvn.jp/jp/JVN54676967/nvd
jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000109.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000