CVE-2024-45241

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

13.62% chance of exploitation in the next 30 days, 96th percentile

Nuclei

high

Published

2024-08-26

Proof-of-concept exploits (2)

• d4lyw/CVE-2024-452410★ · 2024-08-25
• verylazytech/CVE-2024-452416★ · 2024-11-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45241.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-46627
• CVE-2024-10914
• CVE-2024-21534
• CVE-2024-23692
• CVE-2024-23897
• CVE-2024-24919