Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-4388

CAS <= 1.0.0 - Unauthenticated Arbitrary File Access

Description

This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown cas

Default version status: affected

  • 0 to ≤ 1.0.0affected

References