CVE-2024-13180

High · 7.5

CVSS

7.5

EPSS

27.2%

Published

Jan 14, 2025

CISA due date

—

The record

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011.

Affected packages

Ecosystem	Package	Introduced	Fixed