CVE-2024-3707 - CVE House
Back to Database
Status published Medium CVE-2024-3707

Exposure of Information Through Directory Listing vulnerability in OpenGnsys

Vulnerability Description

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to enumerate all files in the web tree by accessing a php file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-3707

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Pedro Gabaldón Julá
  • Javier Medina Munuera
  • Antonio José Gálvez Sánchez

References

More from OpenGnsys

View All →
CVE-2024-3706
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenGnsys
Medium 5.9
CVE-2024-3705
Unrestricted Upload of File with Dangerous Type vulnerability in OpenGnsys
High 8.8
CVE-2024-3704
SQL Injection vulnerability in OpenGnsys
Critical 9.8

Affected Vendor

Affected Software

OpenGnsys
Vulnerable Versions:
1.1.1d

Timeline

Official Publish: April 12th, 2024
Last Modified: August 9th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-548

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.