CVE-2024-2863

Path Traversal: '.../...//' (CWE-35)

Published: Mar 25, 2024 / Updated: 7mo ago

010
CVSS 5.3EPSS 0.04%Medium
CVE info copied to clipboard

This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Timeline

CVE Assignment

NVD published the first details for CVE-2024-2863

Mar 25, 2024 at 12:15 AM
First Article

Feedly found the first article mentioning CVE-2024-2863. See article

Mar 25, 2024 at 7:21 AM / National Vulnerability Database
EPSS

EPSS Score was set to: 0.04% (Percentile: 7.5%)

Mar 28, 2024 at 4:50 PM
CVSS Estimate

Feedly estimated the CVSS score as HIGH

Jun 16, 2024 at 10:50 AM
Static CVE Timeline Graph

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI