Beveiligingsadvies

CVE-2024-2045

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-29 23:37:37

Laatst bijgewerkt 2025-05-19 16:56:56

Toegewezen door Fluid Attacks

CVSS-score 5.5

Status PUBLISHED

Beschrijving

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments.

← Alle CVE's bekijken Bekijk op cve.org ↗