CVE-2024-33118

7.5 highEPSS 0.2%

High (7.5) in luckyframe luckyframeweb. EPSS 0.2% chance of exploitation in the next 30 days.

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-494
Published: 2024-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

luckyframe:luckyframeweb

References

https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33118.txt
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33118.txt

Check your stack JSON