CVE-2024-48864CWE-552

File Station 5

Medium · published March 7, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
41.3
In the wild
Unconfirmed
What it is

⚠️ External parties could read or even modify your files with just a simple request! This vulnerability in File Station 5 presents an opportunity for remote attackers to have their way with your data. 🔥 Think of this as a delivery driver who can not only see what’s in your package, but also swap it out with something else before it reaches you — a breach of trust that can lead to a big mess! If exploited, attackers could not only snoop on your sensitive files but also tamper with them, potentially leading to data corruption or unauthorized information access. Imagine the chaos this could cause in a system intended to securely share files!

Put simply

Think of this as a delivery driver who can not only see what’s in your package, but also swap it out with something else before it reaches you — a breach of trust that can lead to a big mess! This vulnerability allows unauthorized external parties to access and manipulate files or directories through File Station 5 by exploiting improper access controls. It effectively opens a back door to your file storage, providing unexpected access to those outside your security perimeter.

What to do

If exploited, attackers could not only snoop on your sensitive files but also tamper with them, potentially leading to data corruption or unauthorized information access. Imagine the chaos this could cause in a system intended to securely share files! To protect yourself, immediately upgrade to File Station 5 version 5.5.6.4741 or later. Regularly review your access controls to ensure that only authorized users can reach sensitive files and directories.🛡️ You’ve got this! By following these steps, you’ll have your system locked down and secure in no time! 🚀

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS
0.00491 · 41.3th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2025-03-07T16:12Z
EPSS history
Timeline
  • 07 MAR 16:12Z
    File Station 5
    cvelistv5