CVE-2024-22050

7.5 HIGH

Published: January 04, 2024 Modified: November 29, 2025

Description

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://github.com/advisories/GHSA-85rf-xh54-whp3

Source: disclosure@vulncheck.com

Patch Third Party Advisory

https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889

Source: disclosure@vulncheck.com

Patch

https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3

Source: disclosure@vulncheck.com

Vendor Advisory

https://vulncheck.com/advisories/vc-advisory-GHSA-85rf-xh54-whp3

Source: disclosure@vulncheck.com

Patch Third Party Advisory

https://github.com/advisories/GHSA-85rf-xh54-whp3

Source: af854a3a-2127-422b-91ae-364da2661108

Patch Third Party Advisory

https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://vulncheck.com/advisories/vc-advisory-GHSA-85rf-xh54-whp3

Source: af854a3a-2127-422b-91ae-364da2661108

Patch Third Party Advisory

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

7.5 / 10.0

EPSS (Exploit Probability)

0.4%

59th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-22 CWE-22

Affected Vendors

boazsegev

Related CVEs