CVE-2024-48735
Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS Studio 9.4 allows remote attacker to access internal files by manipulating default…
Published: 2024-10-30 · CVSS: 7.7 · CVSS 3.1
Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS Studio 9.4 allows remote attacker to access internal files by manipulating default path during file download. NOTE: this is disputed by the vendor because these filesystem paths are allowed for authorized users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7