CVE-2024-41163 HIGH

CVE-2024-41163

Vendor Veertu

Product Anka Build

Weakness CWE-22 · Path traversal

Published October 3, 2024

Last update December 18, 2024

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Key dates

02Disclosure timeline

October 3, 2024 CVE published

December 18, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-41163 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2026-5841 Tenda i3 HTTP R7WebsSecurityHandler path traversal CVE-2022-3361 Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes CVE-2024-27102 Improper isolation of server file access in github.com/pterodactyl/wings CVE-2023-47702 IBM Security Guardium Key Lifecycle Manager directory traversal CVE-2026-2251 Path Traversal leading to Remote Code Execution (RCE)