CVE-2024-46987

HighPublished

Arbitrary path traversal in Camaleon CMS

Published: Sep 18, 2024
Updated: Apr 17, 2025
Assigning CNA: GitHub_M
Evidence observed: Apr 30, 2026

Primary CVSS

7.7/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS probability estimate

14.6%

Moderate · next 30 days

Percentile: 96.6%
Model date: Oct 17, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CMS is running on (depending on the file permissions). This issue may lead to Information Disclosure. This issue has been addressed in release version 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Module

Camaleon CMS Directory Traversal CVE-2024-46987Module
modules/auxiliary/gather/camaleon_download_private_file.rb
Metasploit Framework modules
ResearchEvidence observed: Sep 25, 2026Revision: b22ce1fbae63Related tool
Declared conditions
- platform: Linux($.auxiliary_gather/camaleon_download_private_file.platform)
- verification: check_declared($.auxiliary_gather/camaleon_download_private_file.check)

CVE-2024-46987PoC
Exploit created using Python

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.