CVE-2024-39937

supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files...

CVE-2024-39937

supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files...

CVE-2024-39937

supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files...

CVE-2024-39937

supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files...

CVE-2024-39937

CVE-2024-39937 concerns supOS 5.0, where the API endpoint /api/image/download accepts a parameter fileName that can be manipulated with ../ to perform a directory traversal and read arbitrary files. The vulnerability is a path traversal in the image download functionality, leading to potential co...