CVE-2024-9146
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Oct 5, 2024
Updated: Oct 7, 2024
CWE ID 22
Summary
CVE-2024-9146 is a newly identified Path Traversal vulnerability affecting the CSS JS Files, with versions ranging from n/a to 1.5.0. This issue arises due to an improper limitation of a pathname, allowing attackers to traverse restricted directories. By exploiting this vulnerability, an attacker could potentially gain unauthorized access to sensitive files or information, leading to significant security risks. It is essential for users to update their CSS JS Files to the latest version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.