CVE-2024-4701 | A path traversal issue potentially leading to remote code ex… | CVSS 9.9 CRITICAL

Description

A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18

CVE ID: CVE-2024-4701
State: PUBLISHED
Assigner: netflix
Reserved: 2024-05-09 18:27 UTC
Published: 2024-05-10 18:37 UTC
Last updated: 2024-08-01 20:47 UTC
Primary CWE: CWE-22
CWE-22 Improper Limitation of a Pathname to a Restricted Dir…
Vendor / Product: Netflix / Genie
Sources: cve.org · NVD

9.9 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

SSVC — CISA Coordinator

Affected products (1)

Vendor	Product	Platform	Versions
Netflix	Genie	—	0 ≤ 4.3.18

Weakness (CWE)

CWE	Source	Description
CWE-22	cna	CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

References (1)