Lucene search
K

4 matches found

OSV
OSV
added 2024/03/01 12:15 a.m.5 views

CVE-2024-2045

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...

5.5CVSS5.4AI score
Exploits0References2
CVE
CVE
added 2024/02/29 11:37 p.m.82 views

CVE-2024-2045

The CVE-2024-2045 entry concerns Session version 1.17.5. Affected component: Local File Read via chat attachments, enabling retrieval of internal application files and public files from a user’s device without consent. This is a Local attack (LOCAL) requiring user interaction. Descriptions from m...

5.5CVSS4.9AI score0.00333EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/02/29 11:37 p.m.27 views

CVE-2024-2045 Session 1.17.5 - LFR via chat attachment

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...

5.5CVSS5AI score0.00333EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/02/29 11:37 p.m.15 views

CVE-2024-2045 Session 1.17.5 - LFR via chat attachment

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...

5.5CVSS5AI score0.00333EPSS
Exploits1References2
Rows per page
Query Builder