CVE-2024-39937
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 0.9%
exploitation probability
0.9%top 43% of all CVEs
observed exploitation
nono source reports it
supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files.
CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:C/UI:N
Affected products
n/a · n/a