CVE detail
CVE-2024-48248 — NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
Published 2025-03-19 · Modified 2025-03-19 · Source kev
HIGH
severity
CVSS-derived band
0.9426
EPSS probability
exploitation probability, 30d
100.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2025-04-09
⚠ Actively exploited in the wild — CISA KEV listed 2025-03-19, federal remediation due 2025-04-09.
Description
NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References