CVE-2024-22723

CVE-2024-22723 describes a directory traversal vulnerability in Webtrees 2.1.18, allowing an authenticated administrator to access sensitive files outside the designated 'media/' directory by manipulating the "media_folder" URL parameter. Rated Medium with a CVSS score of 4.9, this vulnerability requires high privileges (administrator access) but has low attack complexity, potentially leading to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.