CNNVD-202508-2199 Information

CNNVD ID

CNNVD-202508-2199

CVE-2024-44373

  • CNNVD Published: 2025-08-19

Description (Chinese)

Allsky Camera是Allsky开源的一个用来拍摄和监测整个天空的相机系统。 Allsky Camera v2023.05.01_04版本存在安全漏洞,该漏洞源于路径遍历,导致未经验证的攻击者可通过参数创建webshell并执行远程代码。

Description (English)

Allsky Camera is an allsky open source camera system used to photograph and monitor the entire sky. Allsky Camera v2023.05.01 04 has a security loophole, which originates from the routing, resulting in unverified assailants creating webshell and implementing remote codes through parameters.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

AllStarLink

Published

2025-08-19

Last Modified

2026-02-24

References

https://github.com/AllskyTeam/allsky/blob/master/html/includes/save_file.php https://lean-strand-cb6.notion.site/CVE-2024-44373-21efbd400a6c80f4a5abf5d5eb9b068c https://gh0stmezh.wordpress.com/2024/08/25/cve-2024-44373/ https://nvd.nist.gov/vuln/detail/CVE-2024-44373 https://access.redhat.com/security/cve/cve-2024-44373

Patch

https://github.com/AllskyTeam/allsky/releases

Share on: