Medium severityGHSA Advisory· Published Nov 1, 2024· Updated Apr 15, 2026
CVE-2024-51483
CVE-2024-51483
Description
changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files, source:file:///etc/passwd can be used to retrieve local system files, where the more traditional file:///etc/passwd gets blocked. Version 0.47.5 fixes the issue.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
changedetection.ioPyPI | < 0.47.5 | 0.47.5 |
Affected products
1- Range: <= 0.47.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/advisories/GHSA-cwgg-57xj-g77rghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-51483ghsaADVISORY
- github.com/dgtlmoon/changedetection.io/blob/master/changedetectionio/model/Watch.pynvdWEB
- github.com/dgtlmoon/changedetection.io/blob/master/changedetectionio/processors/__init__.pynvdWEB
- github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-cwgg-57xj-g77rnvdWEB
News mentions
0No linked articles in our index yet.