CVE-2024-13991: Huijietong Cloud Video Platform

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supply arbitrary file paths to the `fullPath` parameter of the `/fileDownload?action=downloadBackupFile` endpoint and retrieve files from the server filesystem. VulnCheck has observed this vulnerability being exploited in the wild.

Affected products

• Huijietong Cloud Video Platform: any version

Published 2025-10-15. Last modified 2026-10-02.