CVE-2024-11145 – Easy Folder Listing Pro deserialization vulnerability

https://notcve.org/view.php?id=CVE-2024-11145

26 Nov 2024 — Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5. • https://github.com/cisagov/CSAF/blob/develop/csaf_files/IT/white/2024/va-24-331-01.json • CWE-502: Deserialization of Untrusted Data •