VULNERABILITY INTELLIGENCE

CVE-2024-58312

CVSS score7.5 HIGH

EPSS probability1.20%

CISA KEVNot currently listed

Published2025-12-11

Last modified2026-10-27

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like using encoded path traversal characters in HTTP requests.

Weakness classification

disclosure@vulncheck.com: CWE-22

Primary references

disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
disclosure@vulncheck.com — Third Party Advisory
disclosure@vulncheck.com — Product