logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2024-2045

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2024-2045

Description:
Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments.
Last updated date:
03/04/2025
Type:
exploit
Confidence:
HIGH
Date of publishing:
03/04/2025
Reference url to background

https://fluidattacks.com/advisories/newman/

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2025

Privacy Policy