CVE-2024-57784

An issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal.

CVSS v3.1 CNA

5.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

EPSS

0.96% chance of exploitation in the next 30 days, 61st percentile

Published

2025-01-16

Updated

2025-02-03

Proof-of-concept exploits (1)

• s4fv4n/CVE-2024-577840★ · 2025-01-16

References

• CVE Record
• NVD entry

Related

• CVE-2024-57785