CVE-2024-33118

—

CVSS 3.1

7.5 high

EPSS

<1%p16

Published

May 6, 2024 (May 6, 2024)

Modified

Jun 17, 2026

Description

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController.

Vendors: luckyframe
Products: luckyframeweb
Weakness: CWE-494
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.