← Back to browse · API

CVE-2024-13181

Severity
HIGH
CVSS
7.3
EPSS
0.32438
Risk score
40.55
CISA KEV
No
PoC
No
Published
2025-01-14
Modified
2025-01-16
First seen
2026-08-07
Aliases
EUVD-2024-51403, GHSA-5R6M-H6WM-64GP
Products
Ivanti:Avalanche patch: 6.4.7
Sources
euvd EUVD-2024-51403

Description

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.

References