Path Traversal Vulnerability in anji-plus AJ-Report ZIP File Handler

CVE-2024-5353

What is CVE-2024-5353?

A significant security flaw has been identified in the anji-plus AJ-Report application, specifically affecting versions up to 1.4.1. The vulnerability lies within the ZIP File Handler's decompress function, allowing for path traversal attacks. This means that an attacker can exploit this weakness remotely, gaining unauthorized access to sensitive files on the host system. The details of this exploit have been publicly disclosed, raising concerns about its potential use in real-world scenarios. Users of AJ-Report are strongly advised to assess their systems and apply necessary updates to mitigate this risk. For more detailed information, please refer to the technical documentation and issue tracking provided by the vendor.

References