CVE-2024-41973

Path Traversal: '.../...//' (CWE-35)

Published: Nov 18, 2024 / Updated: 1d ago

010
CVSS 8.1EPSS 0.05%High
CVE info copied to clipboard

A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Timeline

CVE Assignment

NVD published the first details for CVE-2024-41973

Nov 18, 2024 at 10:15 AM
First Article

Feedly found the first article mentioning CVE-2024-41973. See article

Nov 18, 2024 at 10:24 AM / National Vulnerability Database
CVSS Estimate

Feedly estimated the CVSS score as HIGH

Nov 18, 2024 at 10:24 AM
EPSS

EPSS Score was set to: 0.05% (Percentile: 17.4%)

Nov 19, 2024 at 9:42 AM
Static CVE Timeline Graph

Affected Systems

Oracle/weblogic_server
+null more

CVSS V3.1

Attack Vector:Network
Attack Complexity:Low
Privileges Required:Low
User Interaction:None
Scope:Unchanged
Confidentiality:None
Integrity:High
Availability Impact:High

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI