Unauthorized Access to System Files via Path Traversal Vulnerability
CVE-2024-11309

7.5HIGH

Key Information:

Vendor

Trcore

Status
Vendor
CVE Published:
18 November 2024

What is CVE-2024-11309?

The DVC product from TRCore has been identified to have a Path Traversal vulnerability, enabling unauthenticated remote attackers to exploit the system and access arbitrary files on the server. This vulnerability arises due to improper input validation and may lead to significant data exposure. Organizations using affected versions of DVC should implement necessary security measures to mitigate risks associated with this vulnerability. Security patches and updates should be monitored and applied as part of a robust cybersecurity strategy, ensuring that sensitive information remains protected.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

DVC 6.0 <= 6.3

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.