CVE-2024-42468

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-42468
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42468.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-42468
Aliases
Published
2024-08-09T18:10:20.660Z
Modified
2026-03-12T08:24:53.164689Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Path traversal (CometVisu)
Details

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. CometVisuServlet in versions prior to 4.2.1 is susceptible to an unauthenticated path traversal vulnerability. Local files on the server can be requested via HTTP GET on the CometVisuServlet. This issue may lead to information disclosure. Users should upgrade to version 4.2.1 of the CometVisu add-on of openHAB to receive a patch.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42468.json"
}
References

Affected packages

Git / github.com/openhab/openhab-addons

Affected ranges

Type
GIT
Repo
https://github.com/openhab/openhab-addons
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d18df74c4b16c63a914845938b49e8ff597a40f2
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.2.1"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42468.json"

Git / github.com/openhab/openhab-webui

Affected ranges

Type
GIT
Repo
https://github.com/openhab/openhab-webui
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c5aa5c6446d53e7f6298a5483914928f7eb35786

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42468.json"