Detections
Analytics
CVE-2024-5821
medium
Description
The vulnerability allows an attacker to access sensitive files on the server by confusing the agent with incorrect file names. When a user requests the content of a file with a misspelled name, the agent attempts to correct the command and inadvertently reveals the content of the intended file, such as /etc/passwd. This can lead to unauthorized access to sensitive information and potential server compromise.
References
https://huntr.com/bounties/6b729046-b9e1-4fa2-a0c5-603745a6db6b