CVE-2024-6433

NONE EPSS 42.1%
Published Jul 10, 20241y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jul 10, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted path. This vulnerability can be exploited by sending a request to the application with a malicious snapshot_path parameter.

Threat Intelligence

EPSS Exploit Probability
42.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-23

References 1

  • huntr.com https://huntr.com/bounties/7d0463dd-6373-4eb8-86fc-beac0a1391a5

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.