← Back to browse · API

CVE-2024-24398

Severity
CRITICAL
CVSS
9.8
EPSS
0.02007
Risk score
39.9
CISA KEV
No
PoC
No
Published
2024-02-06
Modified
2026-07-09
First seen
2026-08-07
Aliases
EUVD-2024-0640, GHSA-GFQF-9W98-7JMX
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-0640

Description

Directory Traversal vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the fileName parameter of the Save function.

References