CVE-2024-41511

3.9 lowEPSS 0.9%

Low (3.9) in 4pace cadclick. EPSS 0.9% chance of exploitation in the next 30 days.

A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter.

Severity

CVSS 3.1

3.9 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2024-10-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

4pace:cadclick

References

http://cadclick.de/
http://kimweb.de/
https://piuswalter.de/blog/multiple-critical-vulnerabilities-in-cadclick/

Check your stack JSON