CVE-2024-22050: Boazsegev Iodine

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.

Affected products

• Boazsegev Iodine: up to and including 0.7.33

Published 2024-01-04. Last modified 2026-07-14.