CVE-2024-45388

CVE-2024-45388 is a high-severity arbitrary file read vulnerability affecting Hoverfly, a service virtualization tool. The flaw allows an unauthenticated attacker to read arbitrary files from the Hoverfly server by manipulating file paths in the /api/v2/simulation POST handler, bypassing intended path restrictions. This vulnerability has a CVSS score of 7.5 (HIGH) due to its network-based attack vector and high confidentiality impact, enabling attackers to access sensitive data. While there is no evidence of active exploitation, a Nuclei template exists, indicating public exploit code availability, though community discussion and media coverage are minimal.