CVE-2024-55213

CVE-2024-55213 concerns the JavaScript component dhtmlxFileExplorer 8.4.6 . The issue is a directory traversal vulnerability in the File Listing function, allowing an attacker to disclose sensitive files and paths on the server. Multiple connected sources confirm the flaw and describe the affecte...

CVE-2024-55214

CVE-2024-55214 describes a Local File Inclusion (LFI) in dhtmlxFileExplorer 8.4.6, enabling an attacker to read sensitive files via the file download function. Reported in multiple sources (NVD, Red Hat, CVE list, PacketStorm, etc.). The vulnerability stems from the download endpoint allowing pat...