CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. See the original NVD description below for full technical details.
CVE
CVE-2024-25154
Severity
MEDIUM
CVSS
5.3
EPSS
0.46%
Original NVD Description
Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web server to return files located outside of the web root which may lead to data leakage.
Related CVEs
Other vulnerabilities affecting the same vendor(s)