Search for packages
| purl | pkg:gem/camaleon_cms@2.7.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5b2p-u2bg-h7dq
Aliases: GHSA-r9cr-qmfw-pmrc |
Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184) |
Affected by 3 other vulnerabilities. |
|
VCID-5gks-ge3p-tya5
Aliases: CVE-2025-2304 GHSA-rp28-mvq3-wf8j |
A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updated_ajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without any filtering. |
Affected by 1 other vulnerability. |
|
VCID-9pwj-kwvj-rkdf
Aliases: GHSA-3hp8-6j24-m5gm |
Duplicate Advisory: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185) |
Affected by 3 other vulnerabilities. |
|
VCID-jcrg-ej53-zfeg
Aliases: CVE-2026-1776 GHSA-jw5g-f64p-6x78 |
Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users to read arbitrary files from the web server’s filesystem. The issue occurs in the download_private_file functionality when the application is configured to use the CamaleonCmsAwsUploader backend. Unlike the local uploader implementation, the AWS uploader does not validate file paths with valid_folder_path?, allowing directory traversal sequences to be supplied via the file parameter. As a result, any authenticated user, including low-privileged registered users, can access sensitive files such as /etc/passwd. This issue represents a bypass of the incomplete fix for CVE-2024-46987 and affects deployments using the AWS S3 storage backend. | There are no reported fixed by versions. |
|
VCID-m6vs-j86s-dud3
Aliases: GHSA-7x4w-cj9r-h4v9 |
Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185) |
Affected by 3 other vulnerabilities. |
|
VCID-n9wa-nusj-kba5
Aliases: CVE-2024-48652 GHSA-hhxg-rvc9-8726 |
Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field. |
Affected by 9 other vulnerabilities. |
|
VCID-s4kg-6wpn-fke4
Aliases: GHSA-8fx8-3rg2-79xw |
Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184) |
Affected by 3 other vulnerabilities. |
|
VCID-v1vd-3v7v-8qht
Aliases: CVE-2024-46987 GHSA-cp65-5m9r-vc2c |
Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CMS is running on (depending on the file permissions). This issue may lead to Information Disclosure. This issue has been addressed in release version 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-jqb3-jybp-nbfn | Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter. |
CVE-2023-30145
GHSA-x487-866m-p8hr |