CVE-2024-22050 Iodine Static File Server Path Traversal Vulnerability

2024-01-0420:24:58

CWE-22

VulnCheck

www.cve.org

path traversal

iodine

static file server

vulnerability

remote attacker

malicious urls

0.001 Low

EPSS

Percentile

41.3%

JSON

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

CNA Affected

[
  {
    "collectionURL": "https://rubygems.org",
    "defaultStatus": "unaffected",
    "packageName": "iodine",
    "versions": [
      {
        "lessThan": "0.7.33",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]