CVE-2024-9362 HIGH

CVE-2024-9362: Directory Traversal in polyaxon/polyaxon

Vendor Polyaxon
Product polyaxon/polyaxon
Weakness CWE-22 · Path traversal
Published March 20, 2025
Last update March 20, 2025

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version. This vulnerability allows an attacker to retrieve directory information and file contents from the server without proper authorization, leading to sensitive information disclosure. The issue enables access to system directories such as `/etc`, potentially resulting in significant security risks.

Key dates

02Disclosure timeline

March 20, 2025 CVE published
March 20, 2025 Record updated