CVE-2024-45241

high · 7.5

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information.

7.5

CVSS

13.6%

EPSS (exploit prob.)

96th

EPSS percentile

2024-08-26

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-22

References

https://daly.wtf/cve-2024-45241-path-traversal-in-centralsquare-crywolf/
https://github.com/d4lyw/CVE-2024-45241/
https://www.centralsquare.com/solutions/public-safety-software/public-safety-agency-operations/crywolf-false-alarm-management-solution

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-45241