Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-48766
8.6
HIGHCVSS v3
Published
May 13, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.
netalertx/NetAlertX
GitHubCentralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
GitHubCentralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.>= 24.7.18, < 24.10.12NVD