CVE-2024-25154

Summary

CVE-2024-25154 is a vulnerability affecting FileCatalyst Direct version 3.8.8 and earlier. This issue stems from improper URL validation, resulting in a path traversal vulnerability. An attacker can exploit this flaw by providing an encoded payload, leading the web server to disclose files located outside of the web root. The potential consequences include data leakage.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.