← CVE Intelligence

CVE-2024-6433

Local File Inclusion in stitionai/devika PUBLISHED

Description (CNA)

The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted path. This vulnerability can be exploited by sending a request to the application with a malicious snapshot_path parameter.

Affected (CNA)

Vendor / productVersions
stitionai / stitionai/devikaaffected unspecified before -

CWE

CWE-23

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.