{"action":"Upgrade stimulsoft-dashboards-js to 2024.1.3 or later.","affected":[{"fixed":"2024.1.3","introduced":"0"}],"component":"stimulsoft-dashboards-js","cve_ids":["CVE-2024-24398"],"ecosystem":"npm","epss":0.02024,"exploited":false,"fixed_versions":["2024.1.3"],"ghsa_id":"GHSA-gfqf-9w98-7jmx","id":"tcs_01M5KFRJXKQKH21TKK8MZYS60F","modified_at":"2024-02-13T19:41:22Z","published_at":"2024-02-06T00:30:28Z","references":["https://osv.dev/vulnerability/GHSA-gfqf-9w98-7jmx","https://nvd.nist.gov/vuln/detail/CVE-2024-24398","https://cloud-trustit.spp.at/s/Pi78FFazHamJQ5R","https://cves.at/posts/cve-2024-24398/writeup","https://github.com/stimulsoft/Dashboards.JS","http://stimulsoft.com"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-gfqf-9w98-7jmx","url":"https://osv.dev/vulnerability/GHSA-gfqf-9w98-7jmx"}],"summary":"Stimulsoft Dashboard.JS directory traversal vulnerability"}