Vulnerability Details CVE-2024-0341
A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The identifier VDB-250109 was assigned to this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.8%
CVSS Severity
CVSS v3 Score 3.5
CVSS v2 Score 2.7
References
Products affected by CVE-2024-0341
-
cpe:2.3:a:inis_project:inis:-
-
cpe:2.3:a:inis_project:inis:2.0.0
-
cpe:2.3:a:inis_project:inis:2.0.1