Lucene search
HistoryJan 04, 2024 - 9:15 p.m.
CVE-2024-22050
path traversal
static file service
iodine 0.7.33
remote attacker
malicious urls
file reading
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
41.1%
Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.
Affected configurations
Node
boazsegeviodineRange≤0.7.33ruby
Related
osv
osv
CVE-2024-22050
2024-01-04 21:15:10
rubygems
rubygems
cve
cve
CVE-2024-22050
2024-01-04 21:15:10
veracode
veracode
Path Traversal
2024-01-08 06:51:08
prion
prion
Path traversal
2024-01-04 21:15:00
github
github
cvelist
cvelist
CVE-2024-22050 Iodine Static File Server Path Traversal Vulnerability
2024-01-04 20:24:58
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
41.1%
Related for NVD:CVE-2024-22050