https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 14:37:54 +0000 https://cve.radiocsirt.org/vuln/cve-2024-5548 <p><strong>Affected:</strong> stitionai/devika, stitionai devika</p> <p>A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint. Attackers can exploit this vulnerability by manipulating the &#39;project_name&#39; parameter in a GET request to download arbitrary files from the system. This issue affects the latest version of the repository. The vulnerability arises due to insufficient input validation in the &#39;download_project&#39; function, allowing attackers to traverse the directory structure and access files outside the intended directory. This could lead to unauthorized access to sensitive files on the server.</p> <p><strong>Affected:</strong> stitionai/devika, stitionai devika</p> <p>A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-project endpoint. Attackers can exploit this vulnerability by manipulating the &#39;project_name&#39; parameter in a GET request to download arbitrary files from the system. This issue affects the latest version of the repository. The vulnerability arises due to insufficient input validation in the &#39;download_project&#39; function, allowing attackers to traverse the directory structure and access files outside the intended directory. This could lead to unauthorized access to sensitive files on the server.</p> https://cve.radiocsirt.org/vuln/cve-2024-5548