CVE-2024-4701
Path Traversal vulnerability via File Uploads in Genie
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Path Traversal vulnerability via File Uploads in Genie
| Assigner | netflix |
| Reserved | 2024-05-09 |
| Published | 2024-05-10 |
| Updated | 2024-08-01 |
A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18
| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L |
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2024-001.md
