CVE-2024-22050

Katalog CVE

CVSS 7.5 · High EPSS 0,92%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada boazsegev iodine. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

Rincian

Terbit di NVD

4 Januari 2024

Terakhir diubah

14 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

0,92% peluang dieksploitasi; lebih tinggi dari 59,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3 advisory vendor
• https://github.com/advisories/GHSA-85rf-xh54-whp3 patch · advisory pihak ketiga
• https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889 patch
• https://vulncheck.com/advisories/vc-advisory-GHSA-85rf-xh54-whp3 patch · advisory pihak ketiga