vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2024-51483

changedetection.io Path Traversal vulnerability

MEDIUM
6.9
CVSS Score
Published: November 1, 2024 at 04:19 PM UTC
Updated: June 17, 2026 at 08:05 AM UTC
2 products affected across 2 vendorsChangedetectionChangedetection

Using changedetection.io by dgtlmoon?

Get instant alerts when new vulnerabilities affect changedetection.io - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.9
Exploit prediction
EPSS 2%
SSVC
PoC

Description

changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files, `source:file:///etc/passwd` can be used to retrieve local system files, where the more traditional `file:///etc/passwd` gets blocked. Version 0.47.5 fixes the issue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Changedetection· Changedetection
60%
v < 0.47.5
Affected range stops below 0.47.5, so it looks safe — our inference, not a vendor statement
Changedetection· Dgtlmoon
60%
v < 0.47.5
Affected range stops below 0.47.5, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (4)

x_refsource_MISC
Source: [email protected]
https://github.com/dgtlmoon/changedetection.io/blob/master/changedetectionio/model/Watch.py#L19
x_refsource_MISC
Source: [email protected]
https://github.com/dgtlmoon/changedetection.io/blob/master/changedetectionio/processors/__init__.py#L35
x_refsource_CONFIRM
Source: [email protected]
https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-cwgg-57xj-g77r
x_refsource_MISC
Source: [email protected]
https://github.com/user-attachments/files/17591630/CL-ChangeDetection.io.Path.Travsersal-311024-181039.pdf

SSVC — Action Prioritization

SSVCPoCAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.9MEDIUMGitHub_M
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-22

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card