CVE-2024-41972

Path Traversal: '.../...//' (CWE-35)

Published: Nov 18, 2024 / Updated: 1d ago

010
CVSS 6.5EPSS 0.05%Medium
CVE info copied to clipboard

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Timeline

CVE Assignment

NVD published the first details for CVE-2024-41972

Nov 18, 2024 at 10:15 AM
First Article

Feedly found the first article mentioning CVE-2024-41972. See article

Nov 18, 2024 at 10:24 AM / National Vulnerability Database
CVSS Estimate

Feedly estimated the CVSS score as HIGH

Nov 18, 2024 at 10:24 AM
EPSS

EPSS Score was set to: 0.05% (Percentile: 19.5%)

Nov 19, 2024 at 9:42 AM
Static CVE Timeline Graph

Affected Systems

Apache
+null more

CVSS V3.1

Attack Vector:Network
Attack Complexity:Low
Privileges Required:Low
User Interaction:None
Scope:Unchanged
Confidentiality:High
Integrity:None
Availability Impact:None

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI