Description
supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files.
High · 8.6
CVE-2024-39937
EUVD-2024-38311GHSA-q745-94ch-rjhg
supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files.
Published Jul 4, 2024 · Updated Nov 10, 2025 · Assigned by mitre