CVE-2024-28977

5.5 mediumEPSS 0.2%

Medium (5.5) in dell repository manager. EPSS 0.2% chance of exploitation in the next 30 days.

Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem with the privileges of the running web application.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-20
Published: 2024-04-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:repository_manager

References

https://www.dell.com/support/kbdoc/en-us/000224414/dsa-2024-190-security-update-for-dell-repository-manager-vulnerability
https://www.dell.com/support/kbdoc/en-us/000224414/dsa-2024-190-security-update-for-dell-repository-manager-vulnerability

Check your stack JSON