CVE-2024-25975

The application implements an up- and downvote function which alters a value within a JSON file. The POST parameters are not filtered properly and therefore an arbitrary file can be overwritten. The file can be controlled by an authenticated attacker, the content cannot be controlled. It is possible to overwrite all files for which the webserver has write access. It is required to supply a relative path (path traversal).

• CWE-73

• http://seclists.org/fulldisclosure/2024/May/34
• https://github.com/HAWK-Digital-Environments/HAWKI/commit/146967f3148e92d1640ffebc21d8914e2d7fb3f1
• https://r.sec-consult.com/hawki
• http://seclists.org/fulldisclosure/2024/May/34
• https://github.com/HAWK-Digital-Environments/HAWKI/commit/146967f3148e92d1640ffebc21d8914e2d7fb3f1
• https://r.sec-consult.com/hawki

Published

May 29, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2597Vulnerability in AMSS++ version 4.31, which does not suffici…6.1
• CVE-2024-25970Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contain…6.5
• CVE-2024-25971Dell PowerProtect Data Manager, version 19.15, contains an X…6.5
• CVE-2024-25972Initialization of a resource with an insecure default vulner…8.3
• CVE-2024-25973The Frentix GmbH OpenOlat LMS is affected by multiple stored…5.4
• CVE-2024-25974The Frentix GmbH OpenOlat LMS is affected by stored a Cross-…5.4
• CVE-2024-25976When LDAP authentication is activated in the configuration i…6.1
• CVE-2024-25977The application does not change the session token when using…7.3
• CVE-2024-25978Insufficient file size checks resulted in a denial of servic…7.5
• CVE-2024-25979The URL parameters accepted by forum search were not limited…5.3
• CVE-2024-2598Vulnerability in AMSS++ version 4.31, which does not suffici…6.1
• CVE-2024-25980Separate Groups mode restrictions were not honored in the H5…5.3