CVE-2024-41163CWE-22
A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0
High · published October 3, 2024
Patch now
High probability of exploitation
CVSS calls it high at 7.5. It sits in the 99.0th percentile for exploit probability.
What it is
A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.52476 · 99.0th percentile
- Weakness
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- Published
- 2024-10-03T15:16Z
EPSS history
Timeline