CVE-2024-11303

Description

The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 allows Path Traversal.This issue affects JetPort 5601: through 1.2.

Reserved 2024-11-17 | Published 2024-11-18 | Updated 2024-11-21 | Assigner CyberDanube

Problem types

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

Default status
unaffected

Any version
affected

Credits

P. Oberndorfer finder

B. Tösch finder

M. Narbeshuber-Spletzer finder

C. Hierzer finder

M. Pammer finder

References

cyberdanube.com/en/en-st-polten-uas-path-traversal-in-korenix-jetport/ third-party-advisory exploit

cve.org (CVE-2024-11303)

nvd.nist.gov (CVE-2024-11303)

Download JSON