CentralSquare CryWolf - Path Traversal

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information. id: CVE-2024-45241 info:...

CVE-2024-45241

POC - CVE-2024-45241: Path Traversal in CentralSquare's CryWolf Vulnerability Overview CVE Identifier: CVE-2024-45241 Product: CentralSquare CryWolf False Alarm Management Affected Component: GeneralDocs.aspx Vulnerability Type: Path Traversal Discovery Date: 2024-08-09 Description A path travers...

CVE-2024-45241

CVE-2024-45241 Traversal de Caminho no CryWolf da CentralSquare Uma vulnerabilidade de traversal de caminho no aplicativo CryWolf Gerenciamento de Alarmes Falsos permite que atacantes não autenticados leiam arquivos fora do diretório web de trabalho, levando à divulgação de informações...

CVE-2024-45241

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information...

Exploit for CVE-2024-45241

PoC exploit for CVE-2024-45241, a path-traversal vulnerability...

CVE-2024-45241

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information...

CentralSquare CryWolf 安全漏洞

CentralSquare CryWolf is a misinformation management system from CentralSquare, Inc. A security vulnerability exists in CentralSquare CryWolf that stems from GeneralDocs.aspx containing a path traversal vulnerability...

CVE-2024-45241

A path traversal vulnerability exists in the GeneralDocs.aspx component of CentralSquare CryWolf (False Alarm Management) versions prior to 2024-08-09 . This flaw allows unauthenticated attackers to use the rpt parameter to read files outside of the web directory, potentially leading to the discl...

CVE-2024-45241: Improper Limitation of a Pathname to a Restricted Directory

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information...

CVE-2024-45241

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information...

CVE-2024-45241

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information...

PT-2024-31499 · Centralsquare · Centralsquare Crywolf

Name of the Vulnerable Software and Affected Versions: CentralSquare CryWolf False Alarm Management versions prior to 2024-08-09 Description: A traversal vulnerability in GeneralDocs.aspx allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter,...