nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-41922 CVE-2024-41922
HIGH
Record summary
CVE-2024-41922 has a selected CVSS score of 7.5 (high).
Description
A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 3, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Anka BuildBrowse Veertu / Anka BuildDefault status: unknown | CVE List | 1.42.0 | affected |
References
3talosintelligence.com
https://talosintelligence.com/vulnerability_reports/TALOS-2024-2061 talosintelligence.com
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2061