CVE-2024-2052

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Mar 18, 2024
CWE ID 552

Summary

CVE-2024-2052 is a newly identified vulnerability labeled as CWE-552: Files or Directories Accessible to External Parties. This issue allows unauthenticated actors to exfiltrate files and logs, and even download files, by manipulating URLs to redirect to unintended locations. The vulnerability puts sensitive information at risk of being accessed by external attackers.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share