CVE-2024-13991

CVE-2024-13991 affects Huijietong Cloud Video Platform. The vulnerability is a path traversal / arbitrary file read in the /fileDownload?action=downloadBackupFile endpoint, exploitable by an unauthenticated attacker who can supply arbitrary paths via the fullPath parameter. Multiple sources confi...