CVE-2024-40524

Critical

Published: 15/07/2024(UTC)Translated: 26/06/2026(UTC)NVD NIST

Summary

A Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool/application.py component.

Risk Assessment

An attacker can remotely read, write, or execute arbitrary files on the server, leading to full system compromise and potential data loss.

Recommendation

Immediately update xmind2testcase to the latest version; if unavailable, temporarily disable or secure access to the webtool/application.py component.

Original NVD description (English source)

Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\application.py component.