CVE-2024-54909
A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this param…
Published: 2025-02-06 · CVSS: 8.1 · CVSS 3.1
A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7