supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files.
References
Link | Resource |
---|---|
https://github.com/bytehunter-rat/supOS-BUG/blob/main/supOSDirectoryTraversal.md | Broken Link |
https://www.supos.com/supOSindex | Product |
Configurations
History
08 Jul 2024, 16:42
Type | Values Removed | Values Added |
---|---|---|
First Time |
Supos
Supos supos |
|
CPE | cpe:2.3:o:supos:supos:5.0:*:*:*:*:*:*:* | |
References | () https://github.com/bytehunter-rat/supOS-BUG/blob/main/supOSDirectoryTraversal.md - Broken Link | |
References | () https://www.supos.com/supOSindex - Product | |
CWE | CWE-22 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
05 Jul 2024, 12:55
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
04 Jul 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-04 22:15
Updated : 2024-07-09 16:23
NVD link : CVE-2024-39937
Mitre link : CVE-2024-39937
CVE.ORG link : CVE-2024-39937
JSON object : View
Products Affected
supos
- supos
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')