HIGHCVSS v3.1 7.7Vulnerability
CVE-2024-58404
Zipline versions from 3.4.5 before 3.7.10 contain a path traversal vulnerability in the user data export endpoint via the name query parameter. Authenticated attackers can bypass the user id check and use directory traversal sequences to read arbitrary files on the server host.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-14T00:40:25.638091+00:00
- Epss score
- 0.00955
- Cvss severity
- HIGH
- Cvss score
- 7.7
- Retrieved at
- 2026-11-14T00:51:01+00:00
- Last source
- FIRST EPSS
- Score
- 7.7
- Cvss version
- 3.1
- Cve id
- CVE-2024-58404
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- First seen by Signal
- 2026-11-13T17:31:47+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Published at
- 2026-11-13T10:17:23.447
- Last modified
- 2026-11-13T10:17:23.447
- Epss percentile
- 0.61922
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph