216.73.217.176

CVE-2024-33879

· Published 24/06/2024 17:15 · Modified 24/06/2024 19:26

Labels: CVE-2024-33879 2024-06-24CVE-2024-33879[email protected]

Essential information

Published
24/06/2024 17:15
Modified
24/06/2024 19:26
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

References