← Back to browse · API

CVE-2024-33350

Severity
CRITICAL
CVSS
9.8
EPSS
0.01824
Risk score
39.84
CISA KEV
No
PoC
No
Published
2024-04-29
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2024-31092, GHSA-XCG3-8P5H-WCF4
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-31092

Description

Directory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary code and obtain sensitive information via the include/model/file.php component.

References