What’s Vulnerable › Vulnerabilities

CVE-2024-22050: Iodine Static File Server Path Traversal Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-04 · updated 2026-07-14
• Weakness: CWE-22

Description

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

Affected products

• boazsegev iodine: through 0.7.33

References

• https://github.com/advisories/GHSA-85rf-xh54-whp3
• https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889
• https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3
• https://vulncheck.com/advisories/vc-advisory-GHSA-85rf-xh54-whp3
• https://github.com/advisories/GHSA-85rf-xh54-whp3
• https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889
• https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3
• https://vulncheck.com/advisories/vc-advisory-GHSA-85rf-xh54-whp3

Get alerted when CVE-2024-22050 or the next vulnerability affects your stack