CVE-2024-49253

Relative Path Traversal (CWE-23)

Published: Oct 16, 2024 / Updated: 34d ago

010
CVSS 8.6EPSS 0.04%High
CVE info copied to clipboard

Relative Path Traversal vulnerability in James Park Analyse Uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through 0.5.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Timeline

CVE Assignment

NVD published the first details for CVE-2024-49253

Oct 16, 2024 at 2:15 PM
First Article

Feedly found the first article mentioning CVE-2024-49253. See article

Oct 16, 2024 at 2:21 PM / National Vulnerability Database
CVSS Estimate

Feedly estimated the CVSS score as HIGH

Oct 16, 2024 at 2:21 PM
EPSS

EPSS Score was set to: 0.04% (Percentile: 9.7%)

Oct 17, 2024 at 10:04 AM
Static CVE Timeline Graph

Affected Systems

Apache/james
+null more

Attack Patterns

CAPEC-139: Relative Path Traversal
+null more

CVSS V3.1

Attack Vector:Network
Attack Complexity:Low
Privileges Required:None
User Interaction:None
Scope:Changed
Confidentiality:None
Integrity:None
Availability Impact:High

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI