Medium severity4.9NVD Advisory· Published Feb 28, 2024· Updated Jun 17, 2026
CVE-2024-22723
CVE-2024-22723
Description
Webtrees 2.1.18 is vulnerable to Directory Traversal. By manipulating the "media_folder" parameter in the URL, an attacker (in this case, an administrator) can navigate beyond the intended directory (the 'media/' directory) to access sensitive files in other parts of the application's file system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
fisharebest/webtreesPackagist | <= 2.1.18 | — |
Affected products
3Patches
Vulnerability mechanics
References
3- cupc4k3.medium.com/cve-2024-22723-webtrees-vulnerability-uncovering-sensitive-data-through-path-traversal-7442e7a38b68nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-6w5q-79rf-7c49ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-22723ghsaADVISORY
News mentions
0No linked articles in our index yet.