VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 30, 2024· Updated Jun 17, 2026

CVE-2024-22523

CVE-2024-22523

Description

Directory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote attackers to obtain sensitive information via uploadimage component.

Affected products

3
  • Fuwushe/Ifair
    cpe:2.3:a:fuwushe:ifair:*:*:*:*:*:*:*:*
    Range: <=23.8_ad0
  • Qiyu/iFairllm-fuzzy2 versions
    <=23.8_ad0+ 1 more
    • (no CPE)range: <=23.8_ad0
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.