Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-8685

Path-Traversal vulnerability in Revolution Pi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Path-Traversal vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to list device directories via the ‘/pictory/php/getFileList.php’ endpoint in the ‘dir’ parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KUNBUS GmbH Revolution Pi

Default version status: unaffected

  • 2022-07-28-revpi-buster versionaffected

References