CVE-2024-9983— Ragic Enterprise Cloud Database - Arbitrary File Read through Path Traversal
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-9983
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ragic Enterprise Cloud Database - Arbitrary File Read through Path Traversal
Source: NVD (National Vulnerability Database)
Vulnerability Description
Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
相对路径遍历
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ragic Enterprise Cloud Database 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ragic Enterprise Cloud Database是Ragic公司的一个企业云数据库。 Ragic Enterprise Cloud Database 2024/08/08 09:45:25之前版本存在安全漏洞，该漏洞源于未正确验证特定页面参数，允许未经身份验证的远程攻击者读取任意系统文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Ragic | Enterprise Cloud Database | 0 ~ 2024/08/08 09:45:25 | - |
II. Public POCs for CVE-2024-9983
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-9983
请登录查看更多情报信息。
Same Patch Batch · Ragic · 2024-10-15 · 3 CVEs total
| CVE-2024-9985 | 10.0 CRITICAL | Ragic Enterprise Cloud Database - Arbitrary File Upload |
| CVE-2024-9984 | 9.8 CRITICAL | Ragic Enterprise Cloud Database - Missing Authentication |
IV. Related Vulnerabilities
Same product: Enterprise Cloud Database
- CVE-2025-15016
Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic K - CVE-2025-15015
Ragic｜Enterprise Cloud Database - Arbitrary File Read - CVE-2025-11675
Ragic｜Enterprise Cloud Database - Arbitrary File Upload - CVE-2024-9985
Ragic Enterprise Cloud Database - Arbitrary File Upload - CVE-2024-9984
Ragic Enterprise Cloud Database - Missing Authentication
Same vendor: Ragic
- CVE-2025-15016
Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic K - CVE-2025-15015
Ragic｜Enterprise Cloud Database - Arbitrary File Read - CVE-2025-11675
Ragic｜Enterprise Cloud Database - Arbitrary File Upload - CVE-2024-9985
Ragic Enterprise Cloud Database - Arbitrary File Upload - CVE-2024-9984
Ragic Enterprise Cloud Database - Missing Authentication
Same weakness: CWE-23
- CVE-2026-8209
Gibbon<30.0.01路径遍历漏洞导致拒绝服务 - CVE-2026-43533
OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot M - CVE-2026-43616
Detect-It-Easy < 3.21 Path Traversal Arbitrary File Write - CVE-2026-42085
OpenC3 COSMOS: Arbitrary write to plugins directory via path - CVE-2026-22070
ColorOS Assistant Path Traversal Vulnerability
V. Comments for CVE-2024-9983
No comments yet