💣Exploit CVE-2024-5433 - The Campbell Scientific CSI Web Server supports a

[Maksim]

CVE ID : CVE-2024-5433
Published : May 28, 2024, 7:15 p.m. | 27 minutes ago
Description : The Campbell Scientific CSI Web Server supports a command that will return the most recent file that matches a given expression. A specially crafted expression can lead to a path traversal vulnerability. This command combined with a specially crafted expression allows anonymous, unauthenticated access (allowed by default) by an attacker to files and directories outside of the webserver root directory they should be restricted to.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.