Path Traversal Vulnerability Affects XStore Core

CVE-2024-33557

Summary

The vulnerability involves an improper limitation of a pathname to a restricted directory, which may allow attackers to exploit the XStore Core product by including local files through malicious input. This weakness can lead to potential unauthorized access to sensitive data and system compromise. Affected versions span from n/a up to 5.3.8, making it essential for users to evaluate their installations and apply necessary updates to mitigate the risk associated with this issue.

References