CVE-2024-39937highCWE-22

CVE-2024-39937

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 0.9%
supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files.
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:C/UI:N
Affected products
n/a · n/a