CVE-2024-41163

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41163
A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVSS

No CVSS.

References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2024-2059 Exploit Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2059
Configurations

Configuration 1 (hide)

cpe:2.3:a:veertu:anka_build_cloud:1.42.0:*:*:*:*:*:*:*
History

18 Dec 2024, 15:15

Type Values Removed Values Added
References
  • () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2059 -
Summary A directory traversal vulnerability exists in the archive download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of arbitrary files. An attacker can make an unauthenticated HTTP request to exploit this vulnerability. A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CWE CWE-22
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : unknown

08 Oct 2024, 14:47

Type Values Removed Values Added
First Time Veertu
Veertu anka Build Cloud
References () https://talosintelligence.com/vulnerability_reports/TALOS-2024-2059 - () https://talosintelligence.com/vulnerability_reports/TALOS-2024-2059 - Exploit, Third Party Advisory
CPE cpe:2.3:a:veertu:anka_build_cloud:1.42.0:*:*:*:*:*:*:*

03 Oct 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-03 16:15

Updated : 2024-12-18 15:15

NVD link : CVE-2024-41163

Mitre link : CVE-2024-41163

JSON object : View

Products Affected

veertu

  • anka_build_cloud
CWE

No CWE.