CVE-2024-4388

2024-05-2306:15:11

[email protected]

web.nvd.nist.gov

nvd

cve-2024-4388

path validation

unauthenticated

file download

server vulnerability

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server

References

wpscan.com/vulnerability/5c791747-f60a-40a7-94fd-e4b9bb5ea2b0/