{"affected":[{"defaultStatus":"unaffected","ecosystem":"gem","packageName":"iodine","product":"","source":"CNA: VulnCheck","vendor":"","versions":[{"lessThan":"0.7.33","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","ecosystem":"RubyGems","packageName":"iodine","product":"iodine","source":"OSV GHSA-85rf-xh54-whp3","vendor":"","versions":[{"status":"affected","version":"0.0.1","versionType":"RubyGems"},{"status":"affected","version":"0.0.2","versionType":"RubyGems"},{"status":"affected","version":"0.0.3","versionType":"RubyGems"},{"status":"affected","version":"0.0.4","versionType":"RubyGems"},{"status":"affected","version":"0.1.0","versionType":"RubyGems"},{"status":"affected","version":"0.1.1","versionType":"RubyGems"},{"status":"affected","version":"0.1.11","versionType":"RubyGems"},{"status":"affected","version":"0.1.12","versionType":"RubyGems"},{"status":"affected","version":"0.1.13","versionType":"RubyGems"},{"status":"affected","version":"0.1.14","versionType":"RubyGems"},{"status":"affected","version":"0.1.15","versionType":"RubyGems"},{"status":"affected","version":"0.1.16","versionType":"RubyGems"},{"status":"affected","version":"0.1.17","versionType":"RubyGems"},{"status":"affected","version":"0.1.18","versionType":"RubyGems"},{"status":"affected","version":"0.1.19","versionType":"RubyGems"},{"status":"affected","version":"0.1.2","versionType":"RubyGems"},{"status":"affected","version":"0.1.20","versionType":"RubyGems"},{"status":"affected","version":"0.1.21","versionType":"RubyGems"},{"status":"affected","version":"0.1.3","versionType":"RubyGems"},{"status":"affected","version":"0.1.4","versionType":"RubyGems"},{"status":"affected","version":"0.1.5","versionType":"RubyGems"},{"status":"affected","version":"0.1.6","versionType":"RubyGems"},{"status":"affected","version":"0.1.7","versionType":"RubyGems"},{"status":"affected","version":"0.1.8","versionType":"RubyGems"},{"status":"affected","version":"0.1.9","versionType":"RubyGems"},{"status":"affected","version":"0.2.0","versionType":"RubyGems"},{"status":"affected","version":"0.2.1","versionType":"RubyGems"},{"status":"affected","version":"0.2.10","versionType":"RubyGems"},{"status":"affected","version":"0.2.11","versionType":"RubyGems"},{"status":"affected","version":"0.2.12","versionType":"RubyGems"},{"status":"affected","version":"0.2.13","versionType":"RubyGems"},{"status":"affected","version":"0.2.14","versionType":"RubyGems"},{"status":"affected","version":"0.2.15","versionType":"RubyGems"},{"status":"affected","version":"0.2.16","versionType":"RubyGems"},{"status":"affected","version":"0.2.17","versionType":"RubyGems"},{"status":"affected","version":"0.2.2","versionType":"RubyGems"},{"status":"affected","version":"0.2.3","versionType":"RubyGems"},{"status":"affected","version":"0.2.4","versionType":"RubyGems"},{"status":"affected","version":"0.2.5","versionType":"RubyGems"},{"status":"affected","version":"0.2.6","versionType":"RubyGems"},{"status":"affected","version":"0.2.7","versionType":"RubyGems"},{"status":"affected","version":"0.2.8","versionType":"RubyGems"},{"status":"affected","version":"0.2.9","versionType":"RubyGems"},{"status":"affected","version":"0.3.0","versionType":"RubyGems"},{"status":"affected","version":"0.3.1","versionType":"RubyGems"},{"status":"affected","version":"0.3.2","versionType":"RubyGems"},{"status":"affected","version":"0.3.3","versionType":"RubyGems"},{"status":"affected","version":"0.3.4","versionType":"RubyGems"},{"status":"affected","version":"0.3.5","versionType":"RubyGems"},{"status":"affected","version":"0.3.6","versionType":"RubyGems"},{"status":"affected","version":"0.4.0","versionType":"RubyGems"},{"status":"affected","version":"0.4.1","versionType":"RubyGems"},{"status":"affected","version":"0.4.10","versionType":"RubyGems"},{"status":"affected","version":"0.4.11","versionType":"RubyGems"},{"status":"affected","version":"0.4.12","versionType":"RubyGems"},{"status":"affected","version":"0.4.14","versionType":"RubyGems"},{"status":"affected","version":"0.4.15","versionType":"RubyGems"},{"status":"affected","version":"0.4.16","versionType":"RubyGems"},{"status":"affected","version":"0.4.17","versionType":"RubyGems"},{"status":"affected","version":"0.4.18","versionType":"RubyGems"},{"status":"affected","version":"0.4.19","versionType":"RubyGems"},{"status":"affected","version":"0.4.2","versionType":"RubyGems"},{"status":"affected","version":"0.4.3","versionType":"RubyGems"},{"status":"affected","version":"0.4.4","versionType":"RubyGems"},{"status":"affected","version":"0.4.5","versionType":"RubyGems"},{"status":"affected","version":"0.4.6","versionType":"RubyGems"},{"status":"affected","version":"0.4.7","versionType":"RubyGems"},{"status":"affected","version":"0.4.8","versionType":"RubyGems"},{"status":"affected","version":"0.5.0","versionType":"RubyGems"},{"status":"affected","version":"0.5.1","versionType":"RubyGems"},{"status":"affected","version":"0.5.2","versionType":"RubyGems"},{"status":"affected","version":"0.6.0","versionType":"RubyGems"},{"status":"affected","version":"0.6.1","versionType":"RubyGems"},{"status":"affected","version":"0.6.2","versionType":"RubyGems"},{"status":"affected","version":"0.6.3","versionType":"RubyGems"},{"status":"affected","version":"0.6.4","versionType":"RubyGems"},{"status":"affected","version":"0.6.5","versionType":"RubyGems"},{"status":"affected","version":"0.7.0","versionType":"RubyGems"},{"status":"affected","version":"0.7.1","versionType":"RubyGems"},{"status":"affected","version":"0.7.10","versionType":"RubyGems"},{"status":"affected","version":"0.7.11","versionType":"RubyGems"},{"status":"affected","version":"0.7.12","versionType":"RubyGems"},{"status":"affected","version":"0.7.13","versionType":"RubyGems"},{"status":"affected","version":"0.7.14","versionType":"RubyGems"},{"status":"affected","version":"0.7.15","versionType":"RubyGems"},{"status":"affected","version":"0.7.16","versionType":"RubyGems"},{"status":"affected","version":"0.7.17","versionType":"RubyGems"},{"status":"affected","version":"0.7.18","versionType":"RubyGems"},{"status":"affected","version":"0.7.19","versionType":"RubyGems"},{"status":"affected","version":"0.7.2","versionType":"RubyGems"},{"status":"affected","version":"0.7.20","versionType":"RubyGems"},{"status":"affected","version":"0.7.21","versionType":"RubyGems"},{"status":"affected","version":"0.7.22","versionType":"RubyGems"},{"status":"affected","version":"0.7.23","versionType":"RubyGems"},{"status":"affected","version":"0.7.24","versionType":"RubyGems"},{"status":"affected","version":"0.7.25","versionType":"RubyGems"},{"status":"affected","version":"0.7.26","versionType":"RubyGems"},{"status":"affected","version":"0.7.27","versionType":"RubyGems"},{"status":"affected","version":"0.7.28","versionType":"RubyGems"},{"status":"affected","version":"0.7.29","versionType":"RubyGems"},{"status":"affected","version":"0.7.3","versionType":"RubyGems"},{"status":"affected","version":"0.7.31","versionType":"RubyGems"},{"status":"affected","version":"0.7.32","versionType":"RubyGems"},{"status":"affected","version":"0.7.33","versionType":"RubyGems"},{"status":"affected","version":"0.7.4","versionType":"RubyGems"},{"status":"affected","version":"0.7.5","versionType":"RubyGems"},{"status":"affected","version":"0.7.6","versionType":"RubyGems"},{"status":"affected","version":"0.7.7","versionType":"RubyGems"},{"status":"affected","version":"0.7.8","versionType":"RubyGems"},{"status":"affected","version":"0.7.9","versionType":"RubyGems"},{"events":[{"introduced":"0"},{"fixed":"0.7.34"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2024-22050","cwes":["CWE-22"],"description":"Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.","epss":{"date":"2026-11-08","percentile":0.60555,"score":0.00921},"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1794146395594,"publishedAt":1704399898500,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889"},{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/advisories/GHSA-85rf-xh54-whp3"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-85rf-xh54-whp3"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3"},{"source":"ADP: CVE","tags":["patch","x_transferred"],"url":"https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://github.com/advisories/GHSA-85rf-xh54-whp3"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-85rf-xh54-whp3"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-85rf-xh54-whp3"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-85rf-xh54-whp3"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889"},{"kind":"fix","source":"ADP: CVE","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889"},{"kind":"fix","source":"OSV GHSA-85rf-xh54-whp3","text":"iodine (RubyGems): OSV reports a fixed version 0.7.34. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-85rf-xh54-whp3"}],"revision":"ce51da89d05dea1a6fd505beab3a47a300fdf83d3b18ad3a7b9010d27cfe3d43","sources":[{"modifiedAt":1794146395594,"name":"CNA: VulnCheck","retrievedAt":1794146925384,"url":"https://www.cve.org/CVERecord?id=CVE-2024-22050"},{"modifiedAt":1783493575757,"name":"OSV / GitHub Security Advisories","retrievedAt":1794146925832,"url":"https://osv.dev/vulnerability/GHSA-85rf-xh54-whp3"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150527240,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-22050"}],"ssvc":{"assessedAt":1750098995376,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Iodine Static File Server Path Traversal Vulnerability","updatedAt":1794150527240}