CVE-2024-25164

7.5 highEPSS 0.9%

High (7.5) in idurarapp idurar. EPSS 0.9% chance of exploitation in the next 30 days.

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2024-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

idurarapp:idurar

References

https://github.com/idurar/idurar-erp-crm/tree/2.0.0/routes/erpRoutes/erpDownloadRouter.js
https://github.com/u32i/cve/tree/main/CVE-2024-25164
https://github.com/idurar/idurar-erp-crm/tree/2.0.0/routes/erpRoutes/erpDownloadRouter.js
https://github.com/u32i/cve/tree/main/CVE-2024-25164

Check your stack JSON