Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-45845

Sept. 12, 2024, 8:15 p.m.

Product(s) Impacted

nix

  • 2.24
  • 2.24.5

Description

Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-45593. Reason: This record is a reservation duplicate of CVE-2024-45593. Notes: All CVE users should reference CVE-2024-45593 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

Weaknesses

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CWE ID: 22

Date

Published: Sept. 10, 2024, 11:15 a.m.

Last Modified: Sept. 12, 2024, 8:15 p.m.

Status : Rejected

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

cve@mitre.org