High · 7.5 CVE-2024-57669 EUVD-2024-53699GHSA-vp47-mv7q-f7h2

Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive information via the Ba…

Published Feb 3, 2025 · Updated Mar 18, 2025 · Assigned by mitre

Description

Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive information via the BackupController.java file.

References

https://github.com/94fzb/zrlog/issues/193
https://github.com/HypeDuke/vulnerable-research/blob/main/CVE-2024-57669
https://github.com/94fzb/zrlog-plugin-backup-sql-file/commit/32bdb36e6cc4f0b72e1ba85ef4458fb980946ea4