A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter.
History

Mon, 07 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Cadclick
Cadclick cadclick
CPEs cpe:2.3:a:cadclick:cadclick:*:*:*:*:*:*:*:*
Vendors & Products Cadclick
Cadclick cadclick
Metrics cvssV3_1

{'score': 3.9, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 07 Oct 2024 15:00:00 +0000

Type Values Removed Values Added
References

Fri, 04 Oct 2024 17:30:00 +0000

Type Values Removed Values Added
Description A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-10-04T00:00:00

Updated: 2024-10-07T14:49:22.278907

Reserved: 2024-07-18T00:00:00

Link: CVE-2024-41511

cve-icon Vulnrichment

Updated: 2024-10-04T18:57:58.827Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-10-04T18:15:08.090

Modified: 2024-10-07T19:37:09.727

Link: CVE-2024-41511

cve-icon Redhat

No data.