References https://nvd.nist.gov/vuln/detail/CVE-2024-48248 https://labs.watchtowr.com/the-best-security-is-when-we-all-agree-to-keep-everything-secret-except-the-secrets-nakivo-backup-replication-cve-2024-48248/ https://github.com/watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248 https://helpcenter.nakivo.com/Knowledge-Base/Content/Security-Advisory/CVE-2024-48248.htm https://www.cve.org/CVERecord?id=CVE-2024-48248 https://www.rapid7.com/db/vulnerabilities/nakivo-backup-and-replication-cve-2024-48248/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-48248 https://helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-48248-nakivo-backup-and-replication-absolute-path-traversal-vulnerability
Related VulnerabilitiesPoCCVE-2024-48248: NAKIVO Backup and Replication Solution - Unauthenticated Arbitrary File ReadPoCCVE-2024-48248: NAKIVO Backup & Replication任意文件读取漏洞NAKIVO Backup & Replication任意文件读取漏洞