CVE-2024-13524 — Katalog CVE

csirt@kutim:~/threat-intel/cve/CVE-2024-13524

CVSS 4.5 · Medium EPSS 0,20%

Kerentanan Untrusted Search Path. Skor CVSS 3.1 4.5 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. It is recommended to apply a patch to fix this issue. The vendor disagrees that this issue is "something worth reporting, as every attack surface requires privileged access/user compromise".

Rincian

Terbit di NVD: 20 Januari 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Deferred
CVSS 3.1: 4.5 (Medium), sumber vuldb.com
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-426: Untrusted Search Path
EPSS (30 hari): 0,20% peluang dieksploitasi; lebih tinggi dari 9,4% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.