HIGH
Local File Inclusion in stitionai/devika
Published Jul 10, 2024
7.5
HIGHCVSS 3.0
EPSS 0.56%
Description
The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted path. This vulnerability can be exploited by sending a request to the application with a malicious snapshot_path parameter.
Affected products
-
- Version unspecifiedStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Stitionai | Stitionai/devika | n/a |
|
No data.
-
- Version 0StatusaffectedConstraints-
- Version
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner @huntr_ai
Published Jul 10, 2024
Updated Aug 1, 2024
Reserved Jul 1, 2024
Link CVE-2024-6433
CISA Vulnrichment
Updated Jul 23, 2024
ENISA EUVD
EUVD-2024-47533 Assigner @huntr_ai
Published Jul 10, 2024
Updated Aug 1, 2024
Exploited since n/a
Link EUVD-2024-47533