unknown-o download-station index.php path traversal

CVE-2024-0354

What is CVE-2024-0354?

A significant vulnerability has been identified in Download Station by Unknown-o, affecting versions up to 1.1.8. This vulnerability is associated with improper processing in the file index.php, enabling attackers to exploit the application through path traversal techniques using manipulated arguments. Specifically, the argument 'f' can be compromised, allowing the attacker to navigate the file system and potentially access sensitive files. This issue can be exploited remotely, posing a substantial risk as it has been publicly disclosed. Security practices should be updated to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References