Vulnerability Database

296,202

Total vulnerabilities in the database

CVE-2024-0032

In queryChildDocuments of FileSystemProvider.java, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

  • Published: Feb 16, 2024
  • Updated: May 4, 2025
  • CVE: CVE-2024-0032
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

No CWE or OWASP classifications available.