CVE-2024-41376

dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...

CVE-2024-41376

CVE-2024-41376 affects dzzoffice 2.02.1, with a Directory Traversal vulnerability via the endpoint user/space/about.php. Root cause is improper handling of input leading to path traversal, enabling access to files outside the intended directory. Impact as described: potential disclosure of sensit...