CVE-2024-5866

Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing listing of arbitrary directory outside the root directory of the web application. Versions 23.1-HF7 and on have the patch.

• CWE-26
• CWE-22

• https://github.com/klsecservices/Advisories/blob/master/K-Delinea-2023-002.mdThird Party Advisory
• https://github.com/klsecservices/Advisories/blob/master/K-Delinea-2023-002.mdThird Party Advisory

Published

Jul 2, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5860The Tickera – WordPress Event Ticketing plugin for WordPress…4.3
• CVE-2024-5861The WP EasyPay – Square for WordPress plugin for WordPress i…6.5
• CVE-2024-5862Improper Restriction of Excessive Authentication Attempts vu…7.5
• CVE-2024-5863The Easy Image Collage plugin for WordPress is vulnerable to…5.4
• CVE-2024-5864The Easy Affiliate Links plugin for WordPress is vulnerable …4.3
• CVE-2024-5865Vulnerability in Delinea Centrify PAS v. 21.3 and possibly o…6.5
• CVE-2024-5867The Delicate theme for WordPress is vulnerable to Stored Cro…5.4
• CVE-2024-5868The WooCommerce - Social Login plugin for WordPress is vulne…5.3
• CVE-2024-5869The Neighborly theme for WordPress is vulnerable to Stored C…5.4
• CVE-2024-5870The Tweaker5 theme for WordPress is vulnerable to Stored Cro…5.4
• CVE-2024-5871The WooCommerce - Social Login plugin for WordPress is vulne…9.8
• CVE-2024-5872On affected platforms running Arista EOS, a specially crafte…6.5