CVEvulnerability

CVE-2024-37372

3.6 LOW Published 2025-01-09 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-01-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
3.6 LOW — CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Weaknesses
CWE-22

Description

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References