{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/cpas-audit-management-system-v4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:youdatasum:cpas_audit_management_system:4:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2024-58396"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["CPAS Audit Management System (V4)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["YouDataSum"],"content_html":"\u003cp\u003eYouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability in the /cpasm4/plugInManController/downPlugs endpoint. Unauthenticated attackers can exploit the fileId parameter by injecting path traversal sequences (e.g., ../) to read arbitrary files from the underlying file system. The Shadowserver Foundation observed active exploitation of this vulnerability beginning January 13, 2025.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to read arbitrary files on the server hosting the CPAS Audit Management System. This can lead to the exposure of sensitive configuration files, credentials, or system files such as /etc/passwd.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all instances of YouDataSum CPAS Audit Management System V4.\u003c/li\u003e\n\u003cli\u003ePatch or upgrade the affected system immediately, following guidance from YouDataSum.\u003c/li\u003e\n\u003cli\u003eDeploy the provided Sigma rule to detect exploitation attempts targeting the identified endpoint.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for requests containing suspicious path traversal sequences (e.g., ../, ..%2f) directed at the /cpasm4/plugInManController/downPlugs endpoint.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T14:16:13Z","date_published":"2026-10-22T14:16:13Z","id":"https://feed.craftedsignal.io/briefs/2026-10-youdatasum-cpas-path-traversal/","summary":"YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability in the fileId parameter, allowing unauthenticated remote file retrieval.","title":"YouDataSum CPAS Audit Management System Path Traversal (CVE-2024-58396)","url":"https://feed.craftedsignal.io/briefs/2026-10-youdatasum-cpas-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - CPAS Audit Management System (V4)","version":"https://jsonfeed.org/version/1.1"}