CVE-2024-42474

Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a security vulnerability via the static file sharing feature. Users of hosted Streamlit app(s) on Windows were vulnerable to a path traversal vulnerability when the static file sharing feature is enabled. An attacker could utilize the vulnerability to leak the password hash of the Windows user running Streamlit. The vulnerability was patched on Jul 25, 2024, as part of Streamlit open source version 1.37.0. The vulnerability only affects Windows.

• CWE-22
• CWE-22

• https://github.com/streamlit/streamlit/commit/3a639859cfdfba2187c81897d44a3e33825eb0a3Patch
• https://github.com/streamlit/streamlit/security/advisories/GHSA-rxff-vr5r-8cj5Vendor Advisory

Published

Aug 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-42469openHAB, a provider of open-source home automation software,…9.8
• CVE-2024-4247A vulnerability has been found in Tenda i21 1.0.0.14(4656) a…8.8
• CVE-2024-42470openHAB, a provider of open-source home automation software,…9.1
• CVE-2024-42471actions/artifact is the GitHub ToolKit for developing GitHub…7.5
• CVE-2024-42472Flatpak is a Linux application sandboxing and distribution f…10
• CVE-2024-42473OpenFGA is an authorization/permission engine. OpenFGA v1.5.…9.8
• CVE-2024-42475In the OAuth library for nim prior to version 0.11, the `sta…6.5
• CVE-2024-42476In the OAuth library for nim prior to version 0.11, the Auth…6.5
• CVE-2024-42477llama.cpp provides LLM inference in C/C++. The unsafe `type`…7.5
• CVE-2024-42478llama.cpp provides LLM inference in C/C++. The unsafe `data`…9.8
• CVE-2024-42479llama.cpp provides LLM inference in C/C++. The unsafe `data`…9.8
• CVE-2024-4248A vulnerability was found in Tenda i21 1.0.0.14(4656) and cl…8.8