CVE-2024-3707

CVE-2024-3707 is an information exposure vulnerability affecting OpenGnsys version 1.1.1d (Espeto). An attacker can exploit this flaw by accessing a specific PHP file, enabling them to enumerate all files within the web tree. With a CVSS score of 5.3 (Medium), this vulnerability is easily exploitable over the network without user interaction, potentially leading to unauthorized disclosure of information. Currently, there is no public exploit code available, nor is there evidence of active exploitation or significant community discussion.