Security Advisory

CVE-2024-37372

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-09 00:33:47

Last updated 2025-05-02 23:03:00

Assigner hackerone

CVSS score 3.6

State PUBLISHED

Description

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

← Browse all CVEs View on cve.org ↗