CVE-2024-55602

Summary

CVE-2024-55602 is a vulnerability affecting PwnDoc, a penetration test report generator. This issue, discovered prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, allows authenticated users with the ability to update and download templates to inject path traversal sequences into the file extension property. By doing so, they can read arbitrary files on the system. The vulnerability was addressed in commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, which includes a patch to mitigate the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.