GCVE - cpe:2.3:a:redaxo:redaxo:5.17.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redaxo:redaxo:5.17.1:*:*:*:*:*:*:*

part: a version: 5.17.1 update: *

Vendor	Redaxo (`55e996e3-1e52-526e-83f0-0dbea860be57`)
Product	Redaxo (`665ff0a2-67a3-5125-a871-831838755f95`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/redaxo/redaxo`	purl2cpe	2026-06-01 10:15:48.800527

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-50803`	vulnerable	2026-06-08 06:52:11.435135	Details available The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges Published: 2024-11-19T00:00:00.000Z Updated: 2026-07-05T16:04:58.664Z Open on db.gcve.eu Reference links https://github.com/Praison001/CVE-2024-50803-Redaxo	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-46212`	vulnerable	2026-06-08 06:48:09.954313	Details available An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal. Published: 2024-10-16T00:00:00.000Z Updated: 2024-10-17T17:02:19.131Z Open on db.gcve.eu Reference links https://github.com/Purposex7/Vulns4Study/blob/main/REDAXO%20File%20Download%20Exploit.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-46210`	vulnerable	2026-06-08 06:48:09.952695	Details available An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file. Published: 2025-01-10T00:00:00.000Z Updated: 2025-01-31T16:11:18.312Z Open on db.gcve.eu Reference links https://github.com/h4ckr4v3n/research_redaxo_5_17_1.git https://gist.github.com/h4ckr4v3n/26eaa57d94f749b597ede8b404c234df	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-46209`	vulnerable	2026-06-08 06:48:09.952300	Details available A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter. Published: 2025-01-06T00:00:00.000Z Updated: 2025-01-07T15:44:03.591Z Open on db.gcve.eu Reference links https://github.com/h4ckr4v3n/research_redaxo_5_17_1.git https://github.com/h4ckr4v3n/CVE-2024-46209/blob/main/REDAXO%20Stored%20XSS%20%2B%20RCE.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.