CVE-2024-5353

Name of the Vulnerable Software and Affected Versions anji-plus AJ-Report versions up to 1.4.1

Description A critical issue has been found in the ZIP File Handler component, specifically affecting the decompress function, leading to path traversal. This can be initiated remotely.

Recommendations For anji-plus AJ-Report versions up to 1.4.1, consider disabling the decompress function of the ZIP File Handler component as a temporary workaround until a patch is available. Restrict access to the ZIP File Handler to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.