Cluster Control CMON API - Directory Traversal

Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API. id: CVE-2024-41628 info: name: Cluster Control CMON API...

CVE-2024-41628

Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API...

Exploit for CVE-2024-41628

CVE-2024-41628 Simple exploit script developed by Redshift Cy...

CVE-2024-41628

A Directory Traversal vulnerability exists in Severalnines Cluster Control versions 1.9.8 (before 1.9.8-9778), 2.0.0 (before 2.0.0-9779), and 2.1.0 (before 2.1.0-9780). The flaw allows a remote attacker to include and display arbitrary file content via the CMON API , specifically targeting the RP...