We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.
Reserved 2024-10-08 | Published 2025-05-13 | Updated 2025-05-13 | Assigner mitreCWE-698 Execution After Redirect (EAR)
rhinosecuritylabs.com/...ch/cve-2024-46506-rce-in-netalertx/
raw.githubusercontent.com/...ner/http/netalertx_file_read.rb
Support options
