CVE-2024-12014

Path Traversal vulnerability in eSignaViewer Allow Unauthorized File Access

State: Published
Severity: 2.0 Low
Published: Dec 20, 2024
Updated: May 20, 2025
Reserved: Dec 2, 2024

Description

Path Traversal vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers.

Scores

CVSS	Score	Vector	Source
4.0	2.0 Low	CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N	INCIBE

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
eSignaLleidanet PKI	1.3.2Not affected 1.4.4Not affected 4.0.4Not affected 4.1.4Not affected 5.0.2Not affected 5.1.2Not affected 5.2.4Not affected 5.3.3Not affected 5.4.1Not affected

References

https://edgewatch.com/vulnerability-advisories/path-traversal-and-idor-vulnerabilities-in-esignaviewer-allow-unauthorized-file-access/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.