{
"id": "CVE-2024-36427",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-05-29T16:15:11.090",
"lastModified": "2024-05-29T19:50:25.303",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
"lang": "en",
"value": "The file-serving function in TARGIT Decision Suite 23.2.15007 allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file."
}
],
"metrics": {},
"references": [
"url": "https://github.com/DMCERTCE/DecisionSuite_Path_Traversal_SSRF",
"source": "cve@mitre.org"
]