CVE-2024-41628 Information

Description

Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778 2.0.0 before 2.0.0-9779 and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API.

Reference

http://clustercontrol.com http://severalnines.com https://docs.severalnines.com/docs/clustercontrol/changelogs/changes-in-v2-1-0/ https://docs.severalnines.com/docs/clustercontrol/changelogs/changes-in-v1-9-8/#maintenance-release-july-24th-2024