CVE-2024-6433 — Local File Inclusion in stitionai/devika
The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted path. This vulnerab…
Published: 2024-07-10 · CVSS: 7.5 · CVSS 3.0
The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted path. This vulnerability can be exploited by sending a request to the application with a malicious snapshot_path parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7