Vulnerability CVE-2024-25154
Published: 2024-03-13

Description:
Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web server to return files located outside of the web root which may lead to data leakage.  

 References:
https://www.fortra.com/security/advisory/fi-2024-003
https://filecatalyst.software/public/filecatalyst/Direct/3.8.9.90/whatsnew_direct.html
Copyright 2026, cxsecurity.com

 

Back to Top