Security Advisory
CVE-2024-54909
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download.