CVE-2024-6738

MEDIO 5.3CVE-2024-6738 · Published 15/07/2024 · updated 17/06/2026

In breve

CVE-2024-6738 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda tronclass (wisdomgarden).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.46%, superiore al 39.7% delle vulnerabilità.
Correzione: aggiornare a 1.69.61976 o successiva.

Package	Affected versions	Patched versions
tronclass wisdomgarden	`< 1.69.61976`	`1.69.61976`

Description

The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.

References

twcert.org.tw/en/cp-139-7926-f7914-2.html · Third Party Advisory
twcert.org.tw/tw/cp-132-7925-97e1c-1.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free