{"id":"CVE-2024-30851","aliases":["EUVD-2024-28769","GHSA-m65c-w77g-m7jv"],"status":"published","title":"Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to...","description":"Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.04611,"percentile":0.91804,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2024-05-03T00:00:00Z","modified":"2026-10-28T02:30:23Z","exploits":[{"source":"metasploit","id":"auxiliary/gather/jasmin_ransomware_dir_traversal","title":"Jasmin Ransomware Web Server Unauthenticated Directory Traversal","type":"auxiliary","date":"2023-04-08","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/gather/jasmin_ransomware_dir_traversal"},{"source":"metasploit","id":"auxiliary/gather/jasmin_ransomware_sqli","title":"Jasmin Ransomware Web Server Unauthenticated SQL Injection","type":"auxiliary","date":"2023-04-08","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/gather/jasmin_ransomware_sqli"},{"source":"pocgithub","id":"chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc","title":"chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc","date":"2024-04-04","url":"https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc"}],"products":[{"vendor":"codesiddhant","product":"jasmin-ransomware"}],"references":[{"url":"https://github.com/codesiddhant/Jasmin-Ransomware","tags":["x_transferred","Product","package"]},{"url":"https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","package"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30851","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m65c-w77g-m7jv"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/30xxx/CVE-2024-30851.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-30851","description":"Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component.","status":"published","published":"2024-05-03T00:00:00Z","modified":"2024-11-25T15:11:00.972Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:07.482552Z"}],"euvd":[{"id":"EUVD-2024-28769","description":"Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component.","status":"published","published":"2024-05-03T00:00:00Z","modified":"2024-11-25T15:11:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:49.212921Z"}],"ghsa":[{"id":"GHSA-m65c-w77g-m7jv","title":"Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to...","description":"Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component.","status":"published","published":"2024-05-03T18:30:37Z","modified":"2024-11-25T18:34:29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:58:56.988817Z"}],"nvd":[{"id":"CVE-2024-30851","description":"Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component.","status":"published","published":"2024-05-03T17:15:07.63Z","modified":"2026-06-17T07:27:25.33Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:09:56.122111Z"}],"osv":[{"id":"CVE-2024-30851","description":"Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the download_file.php component.","status":"published","published":"2024-05-03T00:00:00Z","modified":"2026-10-28T02:30:23.132440132Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:40.06138Z"}]}}