CVE-2024-34313

2024-06-2400:00:00

mitre

github.com

vpl jail system

directory traversal

crafted request

public endpoint

security issue

AI Score

7.1

Confidence

High

EPSS

Percentile

10.7%

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:vpl:jail_system:*:*:*:*:*:*:*:*"
    ],
    "vendor": "vpl",
    "product": "jail_system",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.0.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]