CVE-2024-8941: Scriptcase

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nm_edit_php_edit.php (in the “subpage” parameter), which allows unauthenticated remote users to bypass SecurityManager's intended restrictions and list and/or read a parent directory via a “/...” or directly into a path used in the POST parameter “field_file” by a web application.

Affected products

• Scriptcase Scriptcase: version 9.4.019 only

Published 2024-09-25. Last modified 2026-06-17.