high7.5
CVE-2024-25164
iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality.
Impact
iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idurarapp | Idurar | Version 2.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/idurar/idurar-erp-crm/tree/2.0.0/routes/erpRoutes/erpDownloadRouter.js
- https://github.com/u32i/cve/tree/main/CVE-2024-25164
- https://github.com/idurar/idurar-erp-crm/tree/2.0.0/routes/erpRoutes/erpDownloadRouter.js
- https://github.com/u32i/cve/tree/main/CVE-2024-25164