Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-22050

Iodine Static File Server Path Traversal Vulnerability

Description

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

iodine

Default version status: unaffected

  • 0 to < 0.7.33affected
pkg:gem/iodine

References