What’s Vulnerable › Vulnerabilities
CVE-2024-48735
- Severity: high (CVSS 7.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-10-30 · updated 2026-07-05
- Weakness: CWE-22
Description
Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS Studio 9.4 allows remote attacker to access internal files by manipulating default path during file download. NOTE: this is disputed by the vendor because these filesystem paths are allowed for authorized users.
Affected products
- Sas Studio: 9.4
References
Get alerted when CVE-2024-48735 or the next vulnerability affects your stack