| |
Vulnerability CVE-2024-34470
Published: 2024-05-06
| Description: |
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path Traversal vulnerability exists in the /public/loader.php file. The path parameter does not properly filter whether the file and directory passed are part of the webroot, allowing an attacker to read arbitrary files on the server. |
References: |
https://github.com/osvaldotenorio/CVE-2024-34470
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
