CVE-2024-48766
HIGH EXPLOITED NUCLEINetAlertX 24.7.18-24.10.12 - Unauthenticated Path Traversal and Arbitrary File Read via logs.php
Title source: llmExploitation Summary
CVE-2024-48766 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including halilkirazkaya, chebuya, msutovsky-r7, including a Metasploit module auxiliary/scanner/http/netalertx_file_read.
A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains functional exploit code for multiple CVEs, including remote file inclusion, path traversal, and unauthorized file deletion vulnerabilities. Each PoC includes HTTP requests or commands to exploit the respective vulnerabilities.
Description
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.
Exploits (2)
This repository contains functional exploit code for multiple CVEs, including remote file inclusion, path traversal, and unauthorized file deletion vulnerabilities. Each PoC includes HTTP requests or commands to exploit the respective vulnerabilities.
This Metasploit module exploits an unauthenticated path traversal vulnerability in NetAlertX's logs.php endpoint to read arbitrary files. It sends a crafted POST request with a traversal payload to leak file contents, such as /etc/passwd.
Nuclei Templates (1)
NetAlert X
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N