{"id":"CVE-2024-55457","aliases":["EUVD-2025-4569","GHSA-7q78-98r8-9mh7"],"status":"published","title":"MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An...","description":"MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.03094,"percentile":0.87916,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2025-02-20T00:00:00Z","modified":"2026-06-17T08:11:08Z","exploits":[{"source":"nuclei","id":"CVE-2024-55457","title":"MasterSAM Star Gate v11 - Local File Inclusion","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55457.yaml"},{"source":"pocgithub","id":"h13nh04ng/CVE-2024-55457-PoC","title":"h13nh04ng/CVE-2024-55457-PoC","date":"2025-01-05","url":"https://github.com/h13nh04ng/CVE-2024-55457-PoC"}],"references":[{"url":"https://github.com/h13nh04ng/CVE-2024-55457-PoC"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55457"},{"url":"https://github.com/advisories/GHSA-7q78-98r8-9mh7"}],"sources":{"cve":[{"id":"CVE-2024-55457","description":"MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information.","status":"published","published":"2025-02-20T00:00:00Z","modified":"2025-02-20T19:40:46.477Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:22.525279Z"}],"euvd":[{"id":"EUVD-2025-4569","description":"MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information.","status":"published","published":"2025-02-20T00:00:00Z","modified":"2025-02-20T19:40:46Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:26.353093Z"}],"ghsa":[{"id":"GHSA-7q78-98r8-9mh7","title":"MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An...","description":"MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information.","status":"published","published":"2025-02-20T18:31:24Z","modified":"2025-02-20T21:31:56Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:00:00.252144Z"}],"nvd":[{"id":"CVE-2024-55457","description":"MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information.","status":"published","published":"2025-02-20T18:15:25.74Z","modified":"2026-06-17T08:11:08.17Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:44.508862Z"}]}}