CVE-2024-8334 is a high-severity vulnerability affecting master-nan Sweet-CMS up to version 5f441e022b8876f07cde709c77b5be6d2f262e3f. This flaw, rated 8.1 HIGH on CVSS, stems from improper output neutralization in the LogHandler function of the middleware/log.go file, allowing remote attackers to achieve high confidentiality and integrity impacts. While the attack complexity is low and no user interaction is required, there is currently no evidence of active exploitation, public exploit code, or significant community discussion. Organizations using Sweet-CMS should apply the recommended patch (identifier 2024c370e6c78b07b358c9d4257fa5d1be732c38) to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2024-08-27CPE matchmatch criteria | cpe:2.3:a:master-nan:sweet-cms:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.