Description
A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download.
High · 8.1
CVE-2024-54909
EUVD-2024-52691GHSA-9r56-r7r5-55vj
A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endp…
Published Feb 6, 2025 · Updated Feb 12, 2025 · Assigned by mitre