Beveiligingsadvies

CVE-2024-51483

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-01 16:19:49
Laatst bijgewerkt 2024-11-01 17:30:47
Toegewezen door GitHub_M
CVSS-score 6.9
Status PUBLISHED

Beschrijving

changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files, `source:file:///etc/passwd` can be used to retrieve local system files, where the more traditional `file:///etc/passwd` gets blocked. Version 0.47.5 fixes the issue.