Security Advisory
CVE-2024-13991
N/A
UNKNOWN
Vulnerability Description
Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supply arbitrary file paths to the `fullPath` parameter of the `/fileDownload?action=downloadBackupFile` endpoint and retrieve files from the server filesystem. VulnCheck has observed this vulnerability being exploited in the wild.
Published Date
October 15, 2025
Official Source
NIST NVD Advisory