References https://nvd.nist.gov/vuln/detail/CVE-2022-24900 https://github.com/onlaj/Piano-LED-Visualizer/issues/350 https://github.com/onlaj/Piano-LED-Visualizer/security/advisories/GHSA-g78x-q3x8-r6m4 https://avd.aquasec.com/nvd/2022/cve-2022-24900/ https://s4e.io/tools/piano-led-visualizer-1-3-directory-traversal-cve-2022-24900 https://vuldb.com/vuln/198714 https://pentest-tools.com/vulnerabilities-exploits/piano-led-visualizer-13-local-file-inclusion_3635 https://www.clouddefense.ai/cve/2022/CVE-2022-24900
Related VulnerabilitiesPoCCVE-2019-16931: WordPress Visualizer <3.3.1 - Cross-Site ScriptingPoCCVE-2019-16932: Visualizer <3.3.1 - Blind Server-Side Request ForgeryPoCCVE-2022-24900: Piano LED Visualizer 1.3 - Local File Inclusion