CVE-2024-43035
Medium · 5.8CVSS
5.8
EPSS
2.5%
Published
Mar 5, 2026
CISA due date
—
The record
Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint. This occurs in serveFiles in mods/voice/src/utils.ts. NOTE: serveFiles exists in 0.5.5 but not in the next release, 0.6.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @fonoster/voice | 0.5.5 | 0.6.1 |
Related vulnerabilities
- GHSA-9fv2-c7v6-p45w Fonoster is vulnerable to directory traversal Same vulnerability
- CVE-2026-14947 A high-privileged remote attacker can upload malicious ZIP archive containing directory… CWE-24
- CVE-2026-76353 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does… CWE-24
- CVE-2026-73573 In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in… CWE-24
- CVE-2026-66140 Exim before 4.99.5 allows directory traversal to access files outside of the spool area… CWE-24
- CVE-2026-44942 A path traversal in handling the "path" component of .repo files processed by libzypp… CWE-24
- CVE-2026-49103 Webmin before 2.640 does not safely construct a filename for saving of an attachment… CWE-24
- CVE-2026-48047 XWiki Platform vulnerable to potential arbitrary file writing using path traversal from… CWE-24