CVE-2024-41163
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 3, 2024
Updated: Dec 18, 2024
CWE ID 22
Summary
CVE-2024-41163 is a newly disclosed directory traversal vulnerability affecting Veertu Anka Build 1.42.0. This issue allows unauthenticated attackers to make a crafted HTTP request, exploiting the archive functionality and potentially disclosing sensitive information. The vulnerability can be triggered without requiring any valid authentication, posing a significant risk to systems using this version of Veertu Anka. Organizations are advised to apply the necessary patches as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.