PRIOn knowledge basePRION:CVE-2024-22050

HistoryJan 04, 2024 - 9:15 p.m.

Path traversal

2024-01-0421:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

iodine

static file service

vulnerability

unauthenticated

remote attacker

malicious urls

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.3%

JSON

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

CPENameOperatorVersion
iodinele0.7.33

CPE	Name	Operator	Version
	iodine	le	0.7.33

References

github.com/advisories/GHSA-85rf-xh54-whp3

github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889

github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3

vulncheck.com/advisories/vc-advisory-GHSA-85rf-xh54-whp3