Executive brief
changedetection.io path traversal using file URI scheme without supplying hostname
Affected products
- PyPI changedetection.io
Junglewise Threat Intelligence
CVE-2024-51998: PYSEC-2026-1239 - changedetection.io path traversal using file URI scheme without supplying hostname
CVE-2024-51998 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: changedetection.io (PyPI). Vendors: PyPI.
Related threats
- dgtlmoon changedetection.io path traversal in static content route
- PYSEC-2026-1241 - ChangeDetection.io XSS in watch overview
- PYSEC-2026-1242 - changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal
- PYSEC-2026-1240 - changedetection.io Path Traversal
- PYSEC-2026-1243 - changedetection.io Cross-site Scripting vulnerability