cve.bz

CVE-2024-51483

6.9 mediumEPSS 2.3%

Medium (6.9). EPSS 2.3% chance of exploitation in the next 30 days. Fixed in changedetection-io 0.47.5.

changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files, `source:file:///etc/passwd` can be used to retrieve local system files, where the more traditional `file:///etc/passwd` gets blocked. Version 0.47.5 fixes the issue.

Severity

CVSS 4.0

6.9 medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE
CWE-22
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-cwgg-57xj-g77rPyPIchangedetection-io<0.47.50.47.5
PYSEC-2026-1240PyPIchangedetection-io<0.47.50.47.5

References

Check your stackJSON