CVE-2024-45241

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information...

CentralSquare CryWolf 安全漏洞

CentralSquare CryWolf is a misinformation management system from CentralSquare, Inc. A security vulnerability exists in CentralSquare CryWolf that stems from GeneralDocs.aspx containing a path traversal vulnerability...

CVE-2024-45241

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information...

CVE-2024-45241

CVE-2024-45241 affects CentralSquare CryWolf (False Alarm Management); the vulnerability is a path traversal in GeneralDocs.aspx that allows unauthenticated attackers to read files outside the working web directory via the rpt parameter, leading to sensitive disclosures. The connected Nuclei temp...

PT-2024-31499 · Centralsquare · Centralsquare Crywolf

Name of the Vulnerable Software and Affected Versions: CentralSquare CryWolf False Alarm Management versions prior to 2024-08-09 Description: A traversal vulnerability in GeneralDocs.aspx allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter,...