Cloudanix VulnDB

CVE-2022-51024

High · 7.5

CVSS

7.5

EPSS

0.6%

Published

Oct 22, 2026

CISA due date

—

The record

Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying '../' sequences in the filename parameter. Attackers can send GET requests to /api/image/cover-upload with filename values like ../appsettings.json to retrieve configuration files outside the temp directory. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities