CVE-2024-24398: Stimulsoft Dashboard.JS directory traversal vulnerability
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.
Published Feb 6, 2024 · Updated Feb 13, 2024
Affected packages
stimulsoft-dashboards-js
- Ecosystem
- npm
- Affected
- < 2024.1.3
- Fixed in
- 2024.1.3
- Check
npm ls stimulsoft-dashboards-js
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology