CVE-2024-40348

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40348
An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal.
CVSS

No CVSS.

References
Link Resource
https://github.com/4rdr/proofs/blob/main/info/Bazaar_1.4.3_File_Traversal_via_Filename.md Third Party Advisory
https://github.com/4rdr/proofs/blob/main/info/Bazaar_1.4.3_File_Traversal_via_Filename.md Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bazarr:bazarr:*:*:*:*:*:*:*:*
History

08 Jul 2025, 14:31

Type Values Removed Values Added
References () https://github.com/4rdr/proofs/blob/main/info/Bazaar_1.4.3_File_Traversal_via_Filename.md - () https://github.com/4rdr/proofs/blob/main/info/Bazaar_1.4.3_File_Traversal_via_Filename.md - Third Party Advisory
CPE cpe:2.3:a:bazarr:bazarr:*:*:*:*:*:*:*:*
First Time Bazarr
Bazarr bazarr

20 Jul 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-20 04:15

Updated : 2025-07-08 14:31

NVD link : CVE-2024-40348

Mitre link : CVE-2024-40348

JSON object : View

Products Affected

bazarr

  • bazarr
CWE

No CWE.