CVE-2024-42468
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2024-42468 is a newly disclosed vulnerability affecting the CometVisuServlet component in openHAB's CometVisu add-on, prior to version 4.2.1. This issue enables unauthenticated attackers to request local files on the server via HTTP GET requests, potentially leading to information disclosure. OpenHAB users are advised to upgrade to the latest version of the CometVisu add-on (version 4.2.1) to mitigate this risk. The vulnerability is described as a path traversal flaw, allowing attackers to manipulate file paths to access unauthorized files. No authentication is required to exploit this issue, making it a serious concern for openHAB users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.