CVE-2024-22050

Description

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.382

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2024-22050 are fixed in Ruby-iodine 0.7.34	Windows
Vulnerabilities CVE-2024-22050 are fixed in Ruby-iodine for Linux 0.7.34	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234