Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php
History

Tue, 03 Nov 2026 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Gleezcms
Gleezcms gleez Cms
Vendors & Products Gleezcms
Gleezcms gleez Cms

Mon, 02 Nov 2026 20:45:00 +0000

Type Values Removed Values Added
Title Directory Traversal in GleezCMS 1.2.0 Serving Sensitive Files
Weaknesses CWE-23

Mon, 02 Nov 2026 19:15:00 +0000

Type Values Removed Values Added
Description Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-11-02T00:00:00.000Z

Updated: 2026-11-02T19:00:11.049Z

Reserved: 2026-10-27T00:00:00.000Z

Link: CVE-2026-117127

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-11-02T19:18:00.980

Modified: 2026-11-02T19:35:33.347

Link: CVE-2026-117127

cve-icon Redhat

No data.