CVE-2024-2863 Path traversal via file upload on LG LED Assistant

This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant...

CVE-2024-2863

CVE-2024-2863 affects LG LED Assistant and is detailed in the Nuclei template: a path traversal flaw in the /api/thumbnail endpoint (Common.js) allows an unauthenticated, remote attacker to upload arbitrary files to arbitrary disk locations on the target. The description confirms endpoint exists,...

CVE-2024-2863 Path traversal via file upload on LG LED Assistant

This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant...