CVE-2024-4388: CAS <= 1.0.0 - Unauthenticated Arbitrary File Access
Published May 23, 2024
·Updated
This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server
Affected Software
1 affected component
Unknown CAS<=1.0.0
Event History
May 23, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-4388?
CVE-2024-4388 has a high severity level due to its ability to allow unauthorized file downloads from the server.
2
How do I fix CVE-2024-4388?
To fix CVE-2024-4388, implement strict validation and sanitization of user input used in file paths before processing requests.
3
Who is affected by CVE-2024-4388?
CVE-2024-4388 affects users of Unknown CAS with versions up to and including 1.0.0.
4
What type of attack can exploit CVE-2024-4388?
CVE-2024-4388 can be exploited through unauthorized access, enabling an attacker to download arbitrary files from the server.
5
Is authentication required to exploit CVE-2024-4388?
No, CVE-2024-4388 can be exploited by unauthenticated users due to improper validation of file paths.