CVE-2024-54909

creationtimestamp| type| source ---|---|--- 2025-02-06 22:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gi5qpz2v 2025-02-07 00:25:58+00:00| seen| https://t.me/cvedetector/17435...

CVE-2024-54909

A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download...

CVE-2024-54909

A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download...

CVE-2024-54909

A path traversal vulnerability exists in GoldPanKit eva-server v4.1.0 affecting the /api/resource/local/download endpoint. An attacker can manipulate the path parameter to achieve arbitrary file download . As a temporary workaround, it is recommended to restrict access to this endpoint or avoid u...