High severityNVD Advisory· Published Oct 15, 2025· Updated Apr 15, 2026

CVE-2024-13991

Description

Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supply arbitrary file paths to the fullPath parameter of the /fileDownload?action=downloadBackupFile endpoint and retrieve files from the server filesystem. VulnCheck has observed this vulnerability being exploited in the wild.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cn-sec.com/archives/2941393.htmlnvd
www.vulncheck.com/advisories/huijietong-cloud-video-platform-filedownload-arbitrary-file-readnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000