CVE-2024-22049
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2024-01-04
Modified: 2026-11-08
First seen: 2026-11-08
Status: pending_score
Description
httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames being written.
Weakness Classification (1)
References & Advisories (8)
vendor-advisory
vendor-advisory
third-party-advisory
related
patch