Path Traversal Vulnerability in CodeFlock FREE DOWNLOAD MANAGER
CVE-2024-49315

8.6HIGH

Key Information:

Vendor

WordPress
Status
Free Download Manager
Vendor
CVE Published:
17 October 2024

What is CVE-2024-49315?

A Path Traversal vulnerability exists in the CodeFlock FREE DOWNLOAD MANAGER that allows an attacker to access files and directories that are outside of the intended restricted directory. This weakness enables unauthorized users to traverse the file system and potentially gain access to sensitive information. The vulnerability affects all versions starting from an unspecified version up to 1.0.0, making it crucial for users to upgrade to secure their systems against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FREE DOWNLOAD MANAGER <= 1.0.0

References

https://patchstack.com/database/vulnerability/free-downlo...
vdb-entry

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

stealthcopter (Patchstack Alliance)
JSON
.