CyberRota Analysis
AI-GeneratedThe vulnerability affects the Screenshot Handler component of the dgtlmoon changedetection.io application, specifically in the static_content function of the flask_app.py file, allowing for path traversal through manipulated filename arguments. Although the exploit has been made public, it is categorized as having high complexity and is considered difficult to exploit. Organizations using versions up to 0.60.7 of this application should prioritize patching or mitigating this vulnerability to prevent potential remote attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function static_content of the file changedetectionio/flask_app.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.