CVE-2024-6445 - Authenticated Local File Inclusion (LFI) in DataFlowX's DataDiodeX

Back Back to CVE browser

CRITICAL

Authenticated Local File Inclusion (LFI) in DataFlowX's DataDiodeX

Published Sep 6, 2024

10.0

CRITICAL

CVSS 4.0

EPSS 0.59%

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DataFlowX Technology DataDiodeX allows Path Traversal.

This issue affects DataDiodeX: from v3.0.0 before v3.1.7.

Affected products

Vendor DataFlowX Technology Product DataDiodeX Default
unaffected
- Version
  v3.0.0
  Status
  affected
  Constraints
  <v3.1.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

DataFlowX Technology

DataDiodeX

unaffected

Version	Status	Constraints
v3.0.0	affected	<v3.1.7

Vendor Dataflowx Product Datadiodex Default
unaffected
- Version
  3.0.0
  Status
  affected
  Constraints
  <3.1.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dataflowx

Datadiodex

unaffected

Version	Status	Constraints
3.0.0	affected	<3.1.7

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47544
Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1409
government-resource
https://www.usom.gov.tr/bildirim/tr-24-1409
government-resourcebroken-linkBroken LinkThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47544		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1409		government-resource
https://www.usom.gov.tr/bildirim/tr-24-1409		government-resourcebroken-linkBroken LinkThird Party Advisory