Non évaluée
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to...
CVE-2024-48766
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.
Références
- advisory github.com
- advisory nvd.nist.gov
- web raw.githubusercontent.com
- web rhinosecuritylabs.com