YouDataSum CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH YouDataSum CVE published 2026-10-22

CVE-2024-58396

CVE-2024-58396 debrief: YouDataSum CPAS Audit Management System V4 path traversal allows unauthenticated file reading via manipulated fileId in GET requests to /cpasm4/plugInManController/downPlugs. This vulnerability enables attackers to access arbitrary files, potentially leading to exposure of sensitive information. Defenders should assess the exposure of their instances and restrict access to prevent [truncated]