Skip to content
Sign in
7.5 High

CVE-2024-4388 This does not validate a path generated with user input when downloading files, allowing unauthenticated user to…

Description

This does not validate a path generated with user input when downloading files, allowing unauthenticated user to download arbitrary files from the server

Affected products and versions

Product Affected versions Fixed in
cas 1.0 earliest → 1.0.0 No fix stated
cas 1.1 earliest → 1.1.0 No fix stated

Other CVEs of cas

The 2 CVEs of cas →
CVE-2024-4399 The does not validate a parameter before making a request to it, which could allow unauthenticated users to perform… 9.1 Critical
Track this CVE