CVE-2024-6786 - Apache IoT MQTT Device File Disclosure Vulnerability

CVE ID : CVE-2024-6786
Published : Sept. 21, 2024, 5:15 a.m. | 24 minutes ago
Description : The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...