supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files.
References
Link | Resource |
---|---|
https://github.com/bytehunter-rat/supOS-BUG/blob/main/supOSDirectoryTraversal.md | Broken Link |
https://www.supos.com/supOSindex | Product |
https://github.com/bytehunter-rat/supOS-BUG/blob/main/supOSDirectoryTraversal.md | Broken Link |
https://www.supos.com/supOSindex | Product |
Configurations
History
21 Nov 2024, 09:28
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.6 |
References | () https://github.com/bytehunter-rat/supOS-BUG/blob/main/supOSDirectoryTraversal.md - Broken Link | |
References | () https://www.supos.com/supOSindex - Product |
08 Jul 2024, 16:42
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:supos:supos:5.0:*:*:*:*:*:*:* | |
References | () https://github.com/bytehunter-rat/supOS-BUG/blob/main/supOSDirectoryTraversal.md - Broken Link | |
References | () https://www.supos.com/supOSindex - Product | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
CWE | CWE-22 | |
First Time |
Supos
Supos supos |
05 Jul 2024, 12:55
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
04 Jul 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-04 22:15
Updated : 2024-11-21 09:28
NVD link : CVE-2024-39937
Mitre link : CVE-2024-39937
CVE.ORG link : CVE-2024-39937
JSON object : View
Products Affected
supos
- supos
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')