CVE-2024-54291
CVSS 3.1 Score 8.6 of 10 (high)
Details
Published Mar 28, 2025
CWE ID 22
Summary
CVE-2024-54291 is a path traversal vulnerability affecting PluginPass, a component used in various applications. The flaw, located in the NotFound PluginPass, permits manipulation of web input to bypass restrictions and access file system calls. This issue can be exploited to gain unauthorized access to sensitive data or execute malicious code. PluginPass versions from n/a up to 0.9.10 are vulnerable to this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.