high7.5
CVE-2024-35081
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method.
Impact
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Luckyframe | Luckyframeweb | Version 3.5.2 |