Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-53586. PoCs published by Korn Chaisuwan_ Charanin Thongudom_ Pongtorn Angsuchotmetee.
AI-analyzed exploit summary This exploit demonstrates a directory path traversal vulnerability in WebFileSys 2.31.0 via the 'relPath' parameter, allowing unauthorized access to files outside the intended directory. The PoC uses a simple HTTP GET request with a traversal payload to exploit the flaw.
Description
An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing data outside the intended directory.
Exploits (1)
This exploit demonstrates a directory path traversal vulnerability in WebFileSys 2.31.0 via the 'relPath' parameter, allowing unauthorized access to files outside the intended directory. The PoC uses a simple HTTP GET request with a traversal payload to exploit the flaw.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N