CVE-2024-31850: Path Traversal
A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31850?
CVE-2024-31850 is considered a medium severity vulnerability due to its potential for unauthorized access to sensitive information.
How do I fix CVE-2024-31850?
To fix CVE-2024-31850, upgrade your CData Arc to version 23.4.8839 or later.
Who is affected by CVE-2024-31850?
CVE-2024-31850 affects users of CData Arc versions prior to 23.4.8839 who are running the embedded Jetty server.
What kind of attack does CVE-2024-31850 enable?
CVE-2024-31850 allows an unauthenticated remote attacker to exploit path traversal and gain access to sensitive files.
Is CVE-2024-31850 easy to exploit?
Yes, CVE-2024-31850 is relatively easy to exploit, especially for attackers familiar with path traversal techniques.