VYPR
← All advisories
Low severity3.5NVD Advisory· Published Jan 9, 2024· Updated Jun 17, 2026

CVE-2024-0341

CVE-2024-0341

Description

A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the component GET Request Handler. The manipulation of the argument path leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The identifier VDB-250109 was assigned to this vulnerability.

Affected products

3
  • Inis Project/Inis
    cpe:2.3:a:inis_project:inis:*:*:*:*:*:*:*:*
    Range: <=2.0.1
  • Inis/Inisdescription
  • Inis/Inisllm-fuzzy
    Range: <=2.0.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.