CVE-2024-55214

The JavaScript file system dhtmlxFileExplorer v.8.4.6 is vulnerable to a Local File Inclusion (LFI) vulnerability within its file download functionality. A remote attacker can exploit this flaw to obtain sensitive information by traversing the file system. A proof-of-concept exploit demonstrates ...

CVE-2024-55213

A directory traversal vulnerability exists in dhtmlxFileExplorer v.8.4.6 , a JavaScript file system. This flaw allows a remote attacker to bypass directory restrictions and obtain sensitive information via the File Listing function. Proof-of-concept exploitation involves using path traversal sequ...