Medium severity5.5NVD Advisory· Published Jan 7, 2023· Updated Jun 17, 2026

CVE-2015-10024

Description

A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/file_storage.go. The manipulation leads to path traversal. The name of the patch is 776bad422f4bd4930d09491711246bbeb1be9ba5. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217612.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Larasync Project/Larasync
cpe:2.3:a:larasync_project:larasync:*:*:*:*:*:*:*:*
Range: <2015-01-20
Hoffie/Larasyncllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: n/a

Patches

Vulnerability mechanics

References

github.com/hoffie/larasync/commit/776bad422f4bd4930d09491711246bbeb1be9ba5nvdPatchThird Party Advisory
vuldb.comnvdThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000