CVE-2024-42007

Description

SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.

Affected Platforms

Weakness Type

CWE-22, CWE-548

References

• https://github.com/NoiseByNorthwest/php-spx/issues/251
• https://github.com/NoiseByNorthwest/php-spx/issues/251
• https://www.vicarius.io/vsociety/posts/journey-to-discovery-and-exploitation-of-…