Path Traversal Vulnerability in FileCatalyst Direct Could Lead to Data Leakage

CVE-2024-25154

Summary

A vulnerability in FileCatalyst Direct arising from improper URL validation allows for path traversal, enabling an encoded payload to exploit the web server. This could result in unauthorized access to files located outside the designated web root, potentially leading to sensitive data leakage. Organizations utilizing affected versions should take immediate action to mitigate this risk and secure their server environments.

References