CVE-2024-4388
Assigner: WPScan
Published: 2024-05-23T06:00:03.466Z
State: PUBLISHED
title: CAS <= 1.0.0 - Unauthenticated Arbitrary File Access
problemTypes: descriptions: description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
type: CWE
affected: vendor: Unknown
product: cas
versions: status: affected
versionType: semver
version: 0
lessThanOrEqual: 1.0.0
defaultStatus: affected
descriptions: value: This  does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server
credits: value: Aly Khaled Aly Abd Al-aal
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator