Skip to main content

CVE-2024-31849

Description

A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application.

NVD
Severity: N/A
CVE ID: CVE-2024-31849
CVSS Score: N/A
CVSS Metrics: NVD assessment not yet provided.

Tenable Network Security, Inc.
Severity: CRITICAL
CVE ID: CVE-2024-31849
CVSS Score: 9.8
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Refrence: NVD MITRE

Proof Of Concept

Nuclei Templates for CVE-2024-31849

Refrence: Project Discovery GitHub

Description
Proof Of Concept