Directory Traversal Vulnerability in MindManager by Alludo
CVE-2024-56179

7.8HIGH

Key Information:

Vendor

Alludo

Status
MindManager
Vendor
CVE Published:
22 August 2025

What is CVE-2024-56179?

A vulnerability in MindManager for Windows prior to version 24.1.150 allows attackers to exploit directory traversal techniques. This may enable unauthorized file access when victims open specially crafted file attachments containing malicious mmap files, potentially leading to files being written to unexpected directories on their systems. Users of affected versions should prioritize updating to the latest release to mitigate this security risk.

References

https://alludo.com
https://pastebin.com/Ax078JVF

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-56179 : Directory Traversal Vulnerability in MindManager by Alludo