CVE-2024-40524

Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\application.py component...

CVE-2024-40524

Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\application.py component...

CVE-2024-40524

CVE-2024-40524 describes a Directory Traversal in xmind2testcase v1.5 that allows a remote attacker to execute arbitrary code through the webtool\application.py component. The root cause is improper handling/validation in application.py enabling traversal to sensitive paths. Affected software: xm...

Arbitrary Code Execution

jupytercore is vulnerable to arbitrary code execution. The vulnerability exists in the configfilepaths function in application.py which executes untrusted files in the current working directory, allowing one user to run code as another...