CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-22851: Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain sensitive information via a crafted request to...
7.5
CVSS
Description
Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain sensitive information via a crafted request to the /static/ endpoint.
Classification
CVE ID: CVE-2024-22851
CVSS Base Severity: HIGH
CVSS Base Score: 7.5
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.27% (probability of being exploited)
EPSS Percentile: 49.96% (scored less or equal to compared to others)
EPSS Date: 2025-05-14 (when was this score calculated)
Stakeholder-Specific Vulnerability Categorization (SSVC)
SSVC Exploitation: none
SSVC Technical Impact: partial
SSVC Automatable: false
References
https://nvd.nist.gov/vuln/detail/CVE-2024-22851https://www.drive-byte.de/en/blog/liveconfig-advisory-cve-2024-22851
https://www.liveconfig.com/de/kb/cve/cve-2024-22851/
https://raeph123.github.io/BlogPosts/LiveConfig/LiveConfig_Advisory_CVE-2024-22851_en.html