CVE-2024-22851: Liveconfig

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain sensitive information via a crafted request to the /static/ endpoint.

Affected products

• Liveconfig Liveconfig: before 2.5.2 (fixed in 2.5.2)

Published 2024-02-02. Last modified 2026-06-17.