{"cve":"CVE-2024-24765","nvd":{"published":"2024-03-06T18:15:46.807","modified":"2026-06-17T07:14:48.877","status":"Analyzed","description":"CasaOS-UserService provides user management functionalities to CasaOS. Prior to version 0.4.7, path filtering of the URL for user avatar image files was not strict, making it possible to get any file on the system. This could allow an unauthorized actor to access, for example, the CasaOS user database, and possibly obtain system root privileges. Version 0.4.7 fixes this issue.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8},"cwes":["CWE-200"],"references":["https://github.com/IceWhaleTech/CasaOS-UserService/commit/3f4558e23c0a9958f9a0e20aabc64aa8fd51840e","https://github.com/IceWhaleTech/CasaOS-UserService/releases/tag/v0.4.7","https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-h5gf-cmm8-cg7c","https://github.com/IceWhaleTech/CasaOS-UserService/commit/3f4558e23c0a9958f9a0e20aabc64aa8fd51840e","https://github.com/IceWhaleTech/CasaOS-UserService/releases/tag/v0.4.7"],"products":["icewhale:casaos"],"source":"nvd","synced_at":"2026-10-19T21:46:54.846886191+00:00"},"epss":{"cve":"CVE-2024-24765","score":0.00971,"percentile":0.61936,"date":"2026-11-01"},"kev":null,"osv":[{"id":"GHSA-h5gf-cmm8-cg7c","url":"https://osv.dev/vulnerability/GHSA-h5gf-cmm8-cg7c","summary":"CasaOS-UserService allows unauthorized access to any file ","modified":"2026-09-10T03:50:10.494221102Z","packages":[{"ecosystem":"Go","name":"github.com/IceWhaleTech/CasaOS-UserService","purl":"pkg:golang/github.com/IceWhaleTech/CasaOS-UserService","ranges":["<0.4.7"],"fixed":["0.4.7"]}]},{"id":"GO-2024-2616","url":"https://osv.dev/vulnerability/GO-2024-2616","summary":"Path traversal and user privilege escalation in github.com/IceWhaleTech/CasaOS-UserService","modified":"2024-05-20T16:03:47Z","packages":[{"ecosystem":"Go","name":"github.com/IceWhaleTech/CasaOS-UserService","purl":"pkg:golang/github.com/IceWhaleTech/CasaOS-UserService","ranges":["<0.4.7"],"fixed":["0.4.7"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}