CVE-2024-35081

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method

High · published May 23, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00461 · 39.1th percentile
Published
2024-05-23T17:02Z
EPSS history
Timeline
  • 23 MAY 17:02Z
    LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method
    cvelistv5