/Vulnerability Library

Polyaxon - Unauthenticated Directory Traversal

CVE-2024-9362
Verified

Description

Polyaxon latest version contains a path traversal caused by insufficient validation in directory access, letting unauthenticated attackers retrieve directory information and file contents, exploit requires no authentication.

Severity

High

CVSS Score

7.5

Exploit Probability

4%

Published Date

May 23, 2026

Template Author

yunseo

CVE-2024-9362.yaml
7.5Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE ID:
cve-2024-9362
CWE ID:
cwe-22

References

https://github.com/polyaxon/polyaxonhttps://huntr.com/bounties/d8dcb40f-ce76-4524-8d06-e0f12a07809d

Remediation Steps

Update to the latest version with patched validation mechanisms.