CVE-2024-48071

EUVD-2024-43169
E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the server to permanently deny service.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CISA-ADPADP
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
weavere-cology
9.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://gist.github.com/CoinIsMoney/d437f267f2d65cb80dd7da97cb2068e8
https://github.com/stuven1989/TemporaryGuild/blob/main/files/exp-eng-3.pdf