← All advisories

High severity8.6NVD Advisory· Published Jul 4, 2024· Updated Jun 17, 2026

CVE-2024-39937

CVE-2024-39937

Description

supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files.

Affected products

3

SupOS/supOS3 versions
cpe:2.3:o:supos:supos:5.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:supos:supos:5.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

3

github.com/bytehunter-rat/supOS-BUG/blob/main/supOSDirectoryTraversal.mdnvdBroken Link
www.supos.com/supOSindexnvdProduct
cloud.supos.com/announcement/detailnvd

News mentions

0

No linked articles in our index yet.