CVE-2024-30143CWE-22

A path traversal vulnerability in HCL AppScan Traffic Recorder

Medium · published March 13, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a location beyond the restricted directory. Potential exploits can completely disrupt or takeover the application or the computer where the application is running.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-03-13T17:34Z
EPSS history
Timeline
  • 13 MAR 17:34Z
    A path traversal vulnerability in HCL AppScan Traffic Recorder
    cvelistv5