d4lyw/CVE-2024-45241

d4lyw/CVE-2024-45241

GitHubGitHub
GitHubgithub.com
Releases0
Path Traversal in CentralSquare's CryWolf
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-45241↗
7.5 HIGH—

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information.