CVE-2024-51998
2 advisories.
PyPI/changedetection-io CVE-2024-51998: high 8.6
changedetection.io path traversal using file URI scheme without supplying hostname
Action: Upgrade changedetection-io to 0.47.6 or later.
pip install changedetection-io==0.47.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.47.6 | - |
Fixed versions
| 0.47.6 |
Sources
- osv: GHSA-6jrf-rcjf-245r
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-6jrf-rcjf-245r
- https://nvd.nist.gov/vuln/detail/CVE-2024-51998
- https://github.com/dgtlmoon/changedetection.io/commit/49bc982c697169c98b79698889fb9d26f6b3317f
- https://github.com/dgtlmoon/changedetection.io
- https://github.com/dgtlmoon/changedetection.io/blob/e0abf0b50507a8a3d0c1d8522ab23519b3e4cdf4/changedetectionio/model/Watch.py#L11-L13
- https://github.com/dgtlmoon/changedetection.io/blob/e0abf0b50507a8a3d0c1d8522ab23519b3e4cdf4/changedetectionio/processors/__init__.py#L37-L41
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.47.06
CVE-2024-51998 · published · modified · JSON
PyPI/changedetection-io CVE-2024-51998: high 8.6
changedetection.io path traversal using file URI scheme without supplying hostname
Action: Upgrade changedetection-io to 0.47.6 or later.
pip install changedetection-io==0.47.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.47.6 | - |
Fixed versions
| 0.47.6 |
Sources
- osv: PYSEC-2026-1239
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-6jrf-rcjf-245r
- https://nvd.nist.gov/vuln/detail/CVE-2024-51998
- https://github.com/dgtlmoon/changedetection.io/commit/49bc982c697169c98b79698889fb9d26f6b3317f
- https://github.com/dgtlmoon/changedetection.io
- https://github.com/dgtlmoon/changedetection.io/blob/e0abf0b50507a8a3d0c1d8522ab23519b3e4cdf4/changedetectionio/model/Watch.py#L11-L13
- https://github.com/dgtlmoon/changedetection.io/blob/e0abf0b50507a8a3d0c1d8522ab23519b3e4cdf4/changedetectionio/processors/__init__.py#L37-L41
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.47.06
- https://pypi.org/project/changedetection-io
- https://github.com/advisories/GHSA-6jrf-rcjf-245r
CVE-2024-51998 · published · modified · JSON