Lucene search
+L

5 matches found

NVD
NVD
•added 2024/06/27 6:15 p.m.•40 views

CVE-2024-5547

A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository, affecting the latest version. The vulnerability arises due to insufficient sanitization of the 'projectname' parameter in the downloadprojectpdf function. Attackers can exploit...

7.5CVSS0.01EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/06/27 5:33 p.m.•36 views

CVE-2024-5547 Directory Traversal in stitionai/devika

A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository, affecting the latest version. The vulnerability arises due to insufficient sanitization of the 'projectname' parameter in the downloadprojectpdf function. Attackers can exploit...

7.5CVSS0.01EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/06/27 5:33 p.m.•12 views

CVE-2024-5547 Directory Traversal in stitionai/devika

A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository, affecting the latest version. The vulnerability arises due to insufficient sanitization of the 'projectname' parameter in the downloadprojectpdf function. Attackers can exploit...

7.5CVSS7.4AI score0.01EPSS
SaveExploits1References2
CVE
CVE
•added 2024/06/27 5:33 p.m.•75 views

CVE-2024-5547

CVE-2024-5547 is a directory traversal vulnerability in the stitionai/devika repository, exposed via the GET /api/download-project-pdf endpoint. The issue stems from insufficient sanitization of the project_name parameter in the download_project_pdf function, enabling an attacker to manipulate th...

7.5CVSS7.3AI score0.01EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2024/06/27 5:33 p.m.•26 views

CVE-2024-5547 Directory Traversal in stitionai/devika

A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository, affecting the latest version. The vulnerability arises due to insufficient sanitization of the 'projectname' parameter in the downloadprojectpdf function. Attackers can exploit...

7.5CVSS7AI score
SaveExploits0References4
Rows per page
Query Builder